Abstract: A method of and apparatus for authorising a user is provided which can be used to allow a user to regain access to a computer system in circumstances where the user has forgotten his or her password. Two authorisers in the form of second and third users of the computer system provide authorisation information to a computer that indicates the identity of the authorisers and of the first user. The computer is operable to check the authorisation information against stored authorisation information to which it has access. This is done to ascertain whether or not the authorisers are allowed to authorise the first user. If the authorisers are allowed, the first user is authorised and is provided with access to the computer system.