A picture password server providing a picture password proof of knowledge of an image, said picture password server comprising: a processor operable to: create a login token in response to a request for the login token including an identifier which identifies a user when communicating with a relying party server, the request originating from the relying party server; send the login token to the relying party server; receive a communication from a client browser, the communication comprising the login token; in response to verifying that the login token is valid, receive a plurality of actions from the client browser regarding the picture password proof of knowledge of the image; in response to authenticating the plurality of actions from the client browser regarding the picture password proof of knowledge of the image based on stored information for the identifier, generate and send a communication comprising an authentication token to the client browser; receive, from the relying party server, a request for an identification token, the request including the authentication token; and in response to verifying that the authentication token is valid, send a communication comprising the identification token to the relying party server to enable a login to the relying party server at the client browser. a processor operable to: create a login token in response to a request for the login token including an identifier which identifies a user when communicating with a relying party server, the request originating from the relying party server; send the login token to the relying party server; receive a communication from a client browser, the communication comprising the login token; in response to verifying that the login token is valid, receive a plurality of actions from the client browser regarding the picture password proof of knowledge of the image; in response to authenticating the plurality of actions from the client browser regarding the picture password proof of knowledge of the image based on stored information for the identifier, generate and send a communication comprising an authentication token to the client browser; receive, from the relying party server, a request for an identification token, the request including the authentication token; and in response to verifying that the authentication token is valid, send a communication comprising the identification token to the relying party server to enable a login to the relying party server at the client browser. create a login token in response to a request for the login token including an identifier which identifies a user when communicating with a relying party server, the request originating from the relying party server; send the login token to the relying party server; receive a communication from a client browser, the communication comprising the login token; in response to verifying that the login token is valid, receive a plurality of actions from the client browser regarding the picture password proof of knowledge of the image; in response to authenticating the plurality of actions from the client browser regarding the picture password proof of knowledge of the image based on stored information for the identifier, generate and send a communication comprising an authentication token to the client browser; receive, from the relying party server, a request for an identification token, the request including the authentication token; and in response to verifying that the authentication token is valid, send a communication comprising the identification token to the relying party server to enable a login to the relying party server at the client browser.