Are you playing from more than one computer, or receiving a new IP from your ISP every time you restart your computer? (That would be unusual). Basically there is a security measure in place that locks your account whenever you log in from a different IP address than the time before.

In any case, a security token circumvents this issue, but carries it's own annoyances.