https://master--suspicious-stonebraker-7d2d21.netlify.app/tags/secret-question/ Recent content in Secret Question on Nikhil's blog Hugo -- gohugo.io en-US Thu, 12 Jul 2007 23:20:00 +0000 https://master--suspicious-stonebraker-7d2d21.netlify.app/post/2007/secret-question-system-is-insecure/ Thu, 12 Jul 2007 23:20:00 +0000 https://master--suspicious-stonebraker-7d2d21.netlify.app/post/2007/secret-question-system-is-insecure/ Seeing that this is so obvious and easily breakable, I'm surprised sites still continue to use the secret question to recover your password. The problem is not so much in the system as in the questions chosen. A really secret question would be one which is known to you and only to you. But usually secret questions involve your mother's maiden name, or your pet or childhood hero. Now to anyone who has known you for a sufficient amount of time, and anyone who has read your profile on one of the social networking sites you are a member of, these are easily answerable.