A password service receives user input identifying a particular account and uses a detecting device for detecting an event related to user interaction with a physical location at a predefined time interval. The password service generates questions based on the detected event and selects a set of questions specific for the particular account from among the generated questions. The password service receives further user input comprising one or more received responses to each question of the set of questions and generates a password for the particular account based on the one or more received responses.