Summary

  • While you should ideally avoid using security questions and password hints, they can enhance your account security if used wisely.
  • Never give truthful answers to security questions, since the information they request is often publicly available and easily obtained by malicious actors.
  • Instead, devise random, unrelated phrases to serve as your answers and store them in your password manager.
  • If you are prompted to provide a password hint, make sure it is something only you will understand and note that hint alongside your password via your password manager.
  • The best solution, however, is to avoid using security questions and password hints altogether and instead opt for more secure two-factor authentication methods.

By Ben Stegner

Original Article