A method for mapping at least two authentication devices to a user account using an authentication server , wherein each authentication device connects to the authentication server using a secured communication channel ; and their mapping to the account of said user is recorded on the authentication server ; and during any transfer of data between the authentication devices mapped to the account of said user, the data is transmitted from one authentication device to the authentication server using a secured communication channel , and from the authentication server to one other authentication device mapped to the account of said user using a secured communication channel when the one other authentication device creates the said secured communication channel , characterized in that simultaneously with the mapping of a second authentication device to the user account on the authentication server , the second device being any authentication device other than a first authentication device the first authentication device being any authentication device which has already been mapped to the user account, the first authentication device transmits an authentication device secret to the second authentication device directly, without the intermediary of the authentication server , and the authentication device secret is stored on the second authentication device ; wherein if the mapping of the second authentication device (102, is the first mapping of another authentication device , the first authentication device generates the authentication device secret , and, at each following mapping of another authentication device , the authentication device secret stored on the first authentication device is transmitted; the authentication device secret is subsequently used in transferring of data containing sensitive information among authentication devices mapped to the account of said user to encrypt at least the sensitive information; or simultaneously with the mapping of a second authentication device to the single user account on the authentication server , the second authentication device being any authentication device other than a first authentication device , the first authentication device being any authentication device which has already been mapped to the user account, the first authentication device transmits a one-time secret to the second authentication device directly, without using the authentication server , and subsequently an authentication device secret is transmitted from the first authentication device to the authentication server using a secured communication channel and from the authentication server to the second authentication device , encrypted using the one-time secret, and after decryption by the one-time secret, the authentication device secret is stored on the second authentication device , wherein, if the mapping of the second authentication device is the first mapping of another authentication device , the first authentication device generates the authentication device secret ; and at each following mapping of another authentication device , the authentication device secret stored on the first authentication device is transmitted, and the authentication device secret is subsequently used in transferring of data containing sensitive information between authentication devices mapped to the account of said user to encrypt at least the sensitive information. <EOS>