Tip of the Day - Mothers Maiden Name

[DickyP]

I just lie - and keep the answers secure.

 

[KitaYama]

but the places I last visited with that requirement didn't offer the chance to add my own question (and answer).

Doc, here, for the sites that don't allow adding a question, it's very common to use a pattern in the answers.
Almost all my friends, relatives, colleagues, neighbors have a vast info about me. What was my first dog's name, which school I attended....etc.
There are apps that you can find a lot of info about others (Facebook,....)

Here, it's very common to use a pattern for the answers of these type of questions. Even if others know the correct answer, they don't know the pattern.
For example if the question is "What was your first pet name?" and the answer is "Cooper", I will type "Croeop" (first,last,second,penult,...)
Some one may answer "Coeoper" (Every other letter)
Someone may mix it with his mobile number and from end to first. "R0e9p0o6o7c7"
The limit is your imagination to create pattern for encrypting.

The key is when you encrypt your answers:
1- Use the correct answer, even if everyone else knows the answer.
2- Use the same key everywhere.
Otherwise you'll mix the pattern and may lock yourself out.

I thought it's common everywhere, but reading these comments, gives me the impression everyone just types the answer normally.

 

[The_Doc_Man]

My answers to such questions are anything but normal. Remember that I was trained in security best practices from military-origin courses, including formation of strong passwords and the issues of non-random passwords. I have a password cheat-sheet with notes, but even IT is obscured by using mnemonics to help me remember what password I'm actually using.

 

[KitaYama]

My answers to such questions are anything but normal. Remember that I was trained in security best practices from military-origin courses, including formation of strong passwords and the issues of non-random passwords. I have a password cheat-sheet with notes, but even IT is obscured by using mnemonics to help me remember what password I'm actually using.

I wasn't talking about passwords. I was talking about the secret questions that you have to set an actual answer to them.

 

[Isaac]

My favorite method, and what I would use if I were programming it myself for a website or program, would be that you can make up the answers AND you can make up the QUESTIONS 100% yourself. Those are the best ones. I've seen quite a few dropdowns with security questions where virtually none of them apply to me. The list of questions tend to make sense to the person who programmed them, but not necessarily others

 

[The_Doc_Man]

I wasn't talking about passwords. I was talking about the secret questions that you have to set an actual answer to them.

The "security questions" are themselves passwords for alternate entry/recovery operations.

 

[Cotswold]

I use my own password system with encrypted data, in which I record the name I've given, the DOB if required and the email address I have used for that company. All security questions are there with no two of them repeated.
I use a paid-for email supplier, so no adverts and it includes secure encrypted emails. It allows many alias emails. I have yearly email addresses that I give to those that I'll probably not deal with again. Most of my online purchases use that. Then in January I delete it and start another. I also have different emails for different types of services. 99% of them don't need my correct name to send me something. If a delivery company takes photos then they won't get my picture.