Morumotto is a new one-time-password two-factor visual authentication system, implemented using jRuby. It works by overlaying two noise images to create a new image that contains a password. This image overlay is performed at the client, that is, in the browser or mobile phone, so that no passwords are ever sent from the server. Real world security is often a trade off between the inherent security of a system and its ease of use. We hope we can contribute to improve this balance by creating a convenient and unobtrusive secure authentication method. We are soon launching morumotto.com, which is a free OpenID provider based on Morumotto visual authentication.