A method for generating a changing authentication input or password required for a user to gain access to a computing device such as a smartphone or server over a network, where said computing device is in operative communication with both a display capable of rendering a group of objects in a Graphic User Interface, and an input device employable to designate and relocate said objects to deposit areas in said GUI, comprising the steps of: allowing said user to provide some or all of said objects in said group of said objects by providing renderings depicting familiar said objects, said familiar objects comprised of people, places, things, or sounds, known to said user; storing said objects in a relational database on a server connected to a network accessible to said computing device of said user; during an attempt at said access by said user, communicating said group of objects to said computing device with a random identifier associated with each said object; allowing said user to employ said input device to relocate chosen pairs of said objects which are associated, to a deposit position on said GUI; employing software adapted to ascertain which of said objects are relocated to a said deposit position and generate a derived said authentication input using a combination of said random identifiers of each of respective object of said chosen pairs; communicating said derived authentication input to said server; comparing said derived authentication input with a calculated authentication input on said server, said calculated authentication input discerned using user-predetermined proper said chosen pairs of said objects stored in said database, and combining said random identifier associated with each said object in a said user-determined proper pair previously communicated during said attempt at said access by said user; if a match of said derived authentication input and said calculated authentication input is discerned, allowing said user access to said computing device or said server; and characterised in that during subsequent said attempts at access by said user, assigning new said random numbers to each said predefined object. allowing said user to provide some or all of said objects in said group of said objects by providing renderings depicting familiar said objects, said familiar objects comprised of people, places, things, or sounds, known to said user; storing said objects in a relational database on a server connected to a network accessible to said computing device of said user; during an attempt at said access by said user, communicating said group of objects to said computing device with a random identifier associated with each said object; allowing said user to employ said input device to relocate chosen pairs of said objects which are associated, to a deposit position on said GUI; employing software adapted to ascertain which of said objects are relocated to a said deposit position and generate a derived said authentication input using a combination of said random identifiers of each of respective object of said chosen pairs; communicating said derived authentication input to said server; comparing said derived authentication input with a calculated authentication input on said server, said calculated authentication input discerned using user-predetermined proper said chosen pairs of said objects stored in said database, and combining said random identifier associated with each said object in a said user-determined proper pair previously communicated during said attempt at said access by said user; if a match of said derived authentication input and said calculated authentication input is discerned, allowing said user access to said computing device or said server; and characterised in that during subsequent said attempts at access by said user, assigning new said random numbers to each said predefined object.