1. A method, comprising: retrieving, at a server, randomly selected subject matter; sending, from the server, the randomly selected subject matter to a client device for authentication of a user; receiving, at the server, data describing a sketch of the randomly selected subject matter drawn by the user; and authenticating, by the server, the user based on the sketch of the randomly selected subject matter.