PDA

View Full Version : Security questions on web sites



Miss Cellane
6-28-14, 4:39pm
Am I the only one who has problems with the list of security questions some web sites have? They'll list 8 or 9 questions, and I'm pulling my hair out to find a single one that I have an answer to. An answer that is so clear-cut that I won't forget it or use another, equally plausible, answer.

For example, I ran into this list today:

What was the first concert you attended? I have no idea. Some classical concert for children.

What was the name of your favorite cartoon series as a child? That was 40 years ago. I can remember wondering why my parents would choose to sleep in on Saturday mornings when there were all those great cartoons on, but a favorite? I can't remember the names of most of them, let alone which ones I liked and which ones I watched because my brothers outnumbered me.

What is the name of a college you applied to but didn’t attend? There were 6 of them. No way to reliably chose one that I will remember for a couple of years until I need it.

What is the name of the place where your wedding reception was held? Oops, I forgot to get married.

When did you first meet your spouse? See above.

What was your oldest sibling’s nickname as a child? He didn't have one.

What was the name of your first pet? Which first pet? The first pet the family had, which wasn't mine? The cat that every one said was mine, but which was really my brother's, although I had to scoop the litter box? My first pet as an adult? If so, her "real" name, or the nickname that was really used? How to remember which one?

In what city or town did your parents meet? This one I actually know.

What is your maternal grandmother’s nickname? Augusta Grace did not stoop to nicknames.

What street did you live on in third grade? In third grade, I was living on an Army base. The street had no name. There was a name for the cluster of houses, which I've forgotten, but no street name.

What was the name of your first supervisor? If it was my first ever paying job, I can remember his face, but his name is consigned to the darkness of forgotten memory. If a later supervisor, how could I remember which one I picked?

So, 9 questions. I have a good, solid answer for exactly one of them.

Some lists are worse than this, in terms of usable questions. I don't know if it's because I'm in my 50s and I've just forgotten some of these details or what, but I've come to dread having to pick one of these security questions. And don't even mention the sites that want you to answer two or three of them!

catherine
6-28-14, 5:02pm
Well, that's why I keep an excel sheet with all of my passwords, indicating if they are case sensitive or not, as well as all of my associated security questions, spelled exactly the way I registered them.. because, shoot, if I put my high school as Jonathan Law instead of jonathan law am I going to get bounced? And I can never remember if the city where I met my husband is Port Chester or Portchester. So I HAVE to write everything down. I have this info also in a sealed envelope for whoever would need to know in the event of my death.

iris lilies
6-28-14, 7:16pm
And at work I have probably, easily 15 different password. Our IT dept. issues the directive "Don't ever write them down!!! >:(" but good lord, of course I'm going to write them down. I don't choose the bloody passwords, they are chosen for me by someone else.

ApatheticNoMore
6-28-14, 7:44pm
Of course the correct way to store pass words is to use a program like Keepass to keep them in (yes you still have to remember the master password to the program or it won't work).

Don't even get me started on passwords at work. Ok there's like maybe 10 programs that use the computer login password. Ok - that's one password. But they each need to be logged into individually with username and password. And you need to login into them again every day AND SOME of them time out after an hour or less of idleness. So you are perpetually logging in to them again, several times a day. And then some stuff requires double login. It seems sometimes I'm logging in to something for the 30th time that day ...

Then there are the databases, ok there's maybe a half a dozen databases I use at least monthly some daily (and more that I use maybe once or twice a year) they each have their own passwords (not my computer login) and thiose passwords are each expiring every 3 months - so then they all have brand new passwords set. The databases I use like once a month, I often lock myself out of.

Jilly
6-28-14, 7:55pm
The intended purpose of those questions is to help safeguard your account, but if you answer those questions properly, someone who knows enough about you can still hack your account. Well, not exactly hack, but gain access to it.

I never answer them correctly. I have a personal list of answers that I use to handle this, and none of the answers I provide is truthful, in that I use a made up reply. Because only I know what formula I use, I can safely use them over and over again and even my immediate family and friends will never be able to figure them out.

Catherine, I like the Excel idea. I use screen shots that I keep in Paint or Word, you know, just in case I forget something that I do not often use.

Dhiana
6-29-14, 6:42am
Just make up the answers so that you actually have a chance to remember them.

What was the first concert you attended? ConcertCat

What was the name of your favorite cartoon series as a child? CartoonCat

What is the name of a college you applied to but didn’t attend? CollegeCat

What is the name of the place where your wedding reception was held? ReceptionCat

When did you first meet your spouse? SpouseCat

It's about having the answers that the computer thinks is right. I agree that these kinds of things are a complete PIA.

razz
6-29-14, 8:26am
Just make up the answers so that you actually have a chance to remember them.

What was the first concert you attended? ConcertCat

What was the name of your favorite cartoon series as a child? CartoonCat

What is the name of a college you applied to but didn’t attend? CollegeCat

What is the name of the place where your wedding reception was held? ReceptionCat

When did you first meet your spouse? SpouseCat

It's about having the answers that the computer thinks is right. I agree that these kinds of things are a complete PIA.
What a great idea as I have tried to be honest to ensure that I don't lock myself out. Always learning something that I need here!

ToomuchStuff
6-29-14, 11:19am
Some, unfortunately not all, have a make your own question. I've seen too many that were sports related, and I am not a sports fan.

For the passwords list, make SURE it is encrypted (a text file called passwords is NOT secure), and also consider not a password but a passphrase. Could be something simple as a series of words (example, MouseCatDog), to a line from a poem you like (best if not known). I've run into length limits using these methods though.

Jilly
6-29-14, 1:29pm
Just make up the answers so that you actually have a chance to remember them.

What was the first concert you attended? ConcertCat

What was the name of your favorite cartoon series as a child? CartoonCat

What is the name of a college you applied to but didn’t attend? CollegeCat

What is the name of the place where your wedding reception was held? ReceptionCat

When did you first meet your spouse? SpouseCat

It's about having the answers that the computer thinks is right. I agree that these kinds of things are a complete PIA.


Some, unfortunately not all, have a make your own question. I've seen too many that were sports related, and I am not a sports fan.

For the passwords list, make SURE it is encrypted (a text file called passwords is NOT secure), and also consider not a password but a passphrase. Could be something simple as a series of words (example, MouseCatDog), to a line from a poem you like (best if not known). I've run into length limits using these methods though.

Both brilliant ideas.

Dhiana, the system you use will be really, really helpful to those of my clients who are complete computer novices.

bUU
6-29-14, 3:02pm
LastPass has a secure notes feature, along with its password vault feature. We store our security question answers there, since after all I may know the answers to these questions as they pertain to me, but I'll be hard-pressed to remember my spouse's grandmother's name, or the name of my spouse's first school.

jp1
7-5-14, 12:47pm
I agree with the suggestions of using a password vault. I use keepass both at home and at work and it's great. It's also got a notes screen for each entry where I put my fake answers to the security questions.