Contents
What is website security answer?
An internet security question is a backup measure used to authenticate the user of a website or an application in the event that they have forgotten their user name and/or password. They should be about something memorable to the user. The answer shouldn’t be anything that might change over time.
Should answering security questions be considered as a kind of two factor authentication?
Security questions, such as “what is the name of your first pet?” are not 2FA because they substitute to your password. In 2FA, you need to input the two factors to authenticate (log in). For example, you need to type your password and present a badge.
How do you answer the security questions?
Create nonsense answers to security questions. A random string of letters and numbers (and special characters, if allowed) is better than a real word. If given the option, create your own security questions rather than choosing from the provided questions. Make your questions nonsense, and irrelevant to your answers.
Why are there so many security questions on websites?
Some websites force you to set up multiple security questions and answers, which means you can’t just choose a single answer that’s easy to remember — you have to choose several different questions and remember all the answers. The real problem with security questions is that the answers are so obvious.
How are security questions used in an authentication flow?
Security questions may be used as part of the main authentication flow to supplement passwords where MFA is not available. A typical authentication flow would be: The user enters their username and password. If the username and password are correct, the user is presented with the security question (s).
Can a password be used with a security question?
Applications should generally use a password along with a second authentication factor (such as an OTP code) to authenticate users. The combination of a password and security questions does not constitute MFA, as both factors as the same (i.e, something you know).
How to choose and answer security questions and answers?
How to Choose and Answer Security Questions. Keep all this in mind when choosing security questions and answers. Choose something that would be difficult for other people to find out or guess, not something like where you went to school. The second alternative is to opt out of security questions.