1. A process for secure access in a computer environment, comprising the steps of: recording a distinct aspect of a user's computer when said user logs on; and writing a token into memory or onto a disk of said user's computer; wherein subsequent logon proceeds as usual only if an existing token is located on a computer used for login; and wherein if an element that is used to identify said computer does not match a user's standard list of computers used, then asking secondary questions of said user before completing authentication.