The Lloyds TSB old method but from the users password rather than a generated set of letters , numbers.
The annoying end user experience for any type is that it slows down what they are doing. If its directed personally at them then it should be quicker for them to remember and input.