707
you are viewing a single comment's thread
view the rest of the comments
[-] zaphod@sopuli.xyz 3 points 13 hours ago

If you store it in your password manager alongside your password, what's even the point in having these questions?

[-] calcopiritus@lemmy.world 1 points 2 hours ago

In some places it is mandatory

[-] FuglyDuck@lemmy.world 6 points 13 hours ago

... that's an excellent question.

Frankly, even if you don't... what's the point? if you can crack the password, you can probably crack the secret question. or questions.

if you can social engineer a password, same with secret questions.

They're basically just a second passwords. possibly one of many passwords with a prompt.

[-] zaphod@sopuli.xyz 1 points 13 hours ago

I'm not even sure how I would store the answers to these questions in a database. Would you hash them like passwords or just store them in plain text (maybe encrypt them, but if someone has access to your servers they can probably access the encryption key too)?

[-] FuglyDuck@lemmy.world 2 points 12 hours ago

many passwords allow you to store pass keys (like with crypto wallets) as hashes attached to any login credentials. I would suggest storing them that way. at worst, I used to create secondary credentials.

this post was submitted on 09 Feb 2026
707 points (97.6% liked)

Comic Strips

22045 readers
2941 users here now

Comic Strips is a community for those who love comic stories.

The rules are simple:

Web of links

founded 2 years ago
MODERATORS