Abstract: A computer-implemented method, according to one approach, includes: generating a multi-factor authentication challenge for a user in response to receiving a request from the user, The multi-factor authentication challenge includes a dynamic combination of available authentication factors corresponding to the user. The dynamic combination of authentication factors includes (i) at least one user defined authentication factor, (ii) at least one biometric authentication factor, and (iii) at least one activity-based authentication factor. Inputs are also received for the multi-factor authentication challenge, and a determination is made as to whether the inputs received satisfy the multi-factor authentication challenge.