A system for authentication has an Internet-connected server providing services and software executing on the server from a non-transitory physical medium. The software provides a function for receiving a request for authentication from a person seeking service at the server, a function for requesting by the server one or more username/password pairs used for log-in for the person at one or more Internet sites remote from the server, a function for logging in by the server at the remote site or sites on behalf of the person, using the username/password pair or pairs provided by the person, and a function for authenticating the person at the server for interaction with the server.