Secure virtual keypad interface for inputting identification token

In this interface the token, perhaps a password or PIN, includes a plurality of codes. The interface 400 is output to a computer display, e.g. the display of an automatic teller machine or mobile phone, and comprises a keypad 401comprising a plurality of input keys 402N and a number of alphanumerical 403N, pictographic 404N and colour 405N codes. Each input key of the keypad comprises at least one of each of the alphanumerical, pictographic and colour codes. For each output of the interface each input key may be randomly assigned a respective location in the interface and each code may be randomly associated with a respective input key, perhaps being repeated whenever an incorrect token is entered to the interface. The token may comprise at least one of each of the alphanumerical, pictographic and colour codes. Each input key may be associated with a respective input key of a second user interface, e.g. for retrofit to some legacy apparatus.