Hacker News new | ask | show | jobs
by 411111111111111 1474 days ago
I don't even remember the last time I had to input a security question, so personally I wouldn't have wanted them to waste their time with such a feature. Isn't the feature inherently moot when you're saving the answer in you password manager? The only way to forget your password is if you're unable to access the password manager, which also contains the answer to the security question.

At that point you're just as secure inputting any random letters to effectively disable the security question unlock.

1 comments

commercial citimanager is an example of a stupid site that asks for those on any auth flow