Are security questions terrible for account security? | Proton
proton.me
Explore the pitfalls of security questions and discover stronger alternatives to safeguard your online privacy.

The answer is yes, and the TL;DR is not to use them, use 2FA, and not share personal details online (which is hopefully all obvious advice)

cross-posted from: https://lemmy.world/post/12060980

  • BoozillaEnglish
    15•9 months ago

    I put these answers in the “notes” section of Bitwarden. It’s a little inconvenient, but it works.

    • @[email protected]English
      2•9 months ago

      It depends on if the purpose of the questions is for 2FA or account recovery. If the latter, you haven’t really solved anything since if you lose one then you lose the other

      • @[email protected]OPEnglish
        14•9 months ago

        My personal view is that the extra security that these so-called security questions bring is worth less than the risks they bring. I’d rather the (low) risk of Bitwarden being compromised and losing the account than the (high) risk of someone searching or discovering information about me I can’t change and losing the account.