“You are what you do”
Verify identity by checking things that have been done by a user, just like "aren't you the one who were waiting in line with me for a taxi yesterday at the station? we discussed the NBA season, didn't we?" - wouldn't that be much better than an endless list of usernames, keycodes, [...]