A token-based method for authenticating a user includes placing a predetermined token (i.e., physical object) at a predetermined location on a touch sensitive device to generate an authentication authorization rather than a traditional text-based, smartcard or biometric method of user authentication. In various embodiments, a plurality of tokens is placed upon the touch sensitive device in a predetermined sequence at predetermined locations to generate an authentication authorization.