Abstract: An authentication or security system can provide multiple categories to user (e.g., a young user), where at least one of the categories does not relate to an experience to be recalled by the user, but relates to one or more fictional stories, fictional narratives, historical stories, fictional locations, fictional constructs, fictional characters (e.g. avatars) etc., and the user selects a category and answers several questions to personalize the story/construct/etc. Received data for this personalization is then stored in an authorization profile that is later used to authenticate the user. Other features and aspects are also disclosed.