Authentication of an individual can be performed even when the individual does not have physical identification documents. A person provides a password, a contact number and at least one piece of human generated information to a company. When the person wants to establish identity, he/she first calls an agent of the company. The agent asks the caller questions that include the human generated information. If the agent is satisfied that the caller is the authorized person, the agent sends a code to the caller using the contact number. The caller can use the password and the code to later authenticate himself/herself.