1. A method comprising: presenting a first authentication challenge at a device at a first time; determining, via a processor, an authentication type based on one of (i) an identity of an application currently being accessed at the device, (ii) a time duration for which the application is used at the device since the first time, or (iii) input capabilities of the device; and presenting, at the device at a second time later than the first time, a second authentication challenge of the authentication type.