Are Security Questions Secure

Security questions are vulnerable to exploitation because they rely on knowledge—if an attacker guesses, researches, or phishes a security answer, for instance, the account is compromised. Not even the best security questions are immune to these attacks.

Why are security questions so bad?

The biggest problem with security questions is that they are permanent and immutable facts about yourself. That means if any website that uses security questions is compromised, those answers are forever insecure.

What is the point of security questions?

Security questions are used to verify a user’s identity on password-protected sites. A security question is a question used to verify a person’s identity on a password-protected network or Web site. Users typically choose one out of a number of biographical questions to answer when they create online accounts.