A method of authenticating a user by capturing an image of the user, assigning a user-name, selecting an image category, selecting a pattern, selecting locations on the user's face, assigning a rotation-value, logging onto a computer, presenting images, where some images are in the image category, selecting images that are the pattern away from the images in the image category, calculating a rotation angle, projecting the selected images that are rotated by the rotation angle onto the user's face at the locations, capturing an image of the user's face with the rotated images projected thereon, and authenticating the user if the user's facial features match the user's face and the projected images are the pattern away from the images in the image-category, are at the locations, are rotated by the rotation angle, and exhibit distortion consistent with the contour of the user's face.