One classified project I worked on used a program to generate a random password which you then used to access the system. It changed every time you accessed the data, even the email system. Since it was classified, however, I never had an opportunity to look into the code to see how they managed the implementation.