A one time password system. Users are issued a credit card-sized smart card with an LCD on the front. The card has a precise clock that is synchronized to a clock on the server. The card and the server both generate numbers based on time elapsed; each number is only valid for a short time period and is used as a password during part of login.