SOLVED: A Question about setting a Secret Question

dothebeats

legendary

Activity: 3542

Merit: 1352

Cashback 15%

Quote from: ndnh on April 12, 2015, 01:49:30 PM

Quote from: dothebeats on April 12, 2015, 01:17:56 PM

The answer that I put is pretty much complex if you might ask me. Unintelligible, I might say. Thanks for reminding me that the secret answer should as complex as possible so as to avoid being hacked by somebody.

Why don't you just remove it instead?

I am assuming you store the 'complex' password somewhere?

Yup. The answer is stored safely. Also, thanks for the idea that I can remove the security question and the answer as well.

Quote from: Muhammed Zakir on April 12, 2015, 01:51:00 PM

I guess there isn't any limit. I tried 5-6 times but didn't ~~find~~ get any time limit or warning.

Resetting your secret question:

• If you don't want to set secret question, make the secret question field blank in sertings, type your password and click update.
• To change your secret question, change question in secret question field & type answer and click update.

Thanks Muhammed Zakir for the great reply. It greatly helped my understanding on this matter. I might as well locked this topic now because all of my queries are answered thoroughly.

Thanks for all of your replies! Cheesy

JarvisTechnology

sr. member

Activity: 350

Merit: 250

People can just bypass your password a security question is normally weaker so I would either have random letters in it to act as a 2nd password or just dont have one.

Muhammed Zakir

hero member

Activity: 560

Merit: 506

I prefer Zakir over Muhammed when mentioning me!

I guess there isn't any limit. I tried 5-6 times but didn't ~~find~~ get any time limit or warning.

Resetting your secret question:

• If you don't want to set secret question, make the secret question field blank in sertings, type your password and click update.
• To change your secret question, change question in secret question field & type answer and click update.

ndnh

legendary

Activity: 1302

Merit: 1005

New Decentralized Nuclear Hobbit

Quote from: dothebeats on April 12, 2015, 01:17:56 PM

The answer that I put is pretty much complex if you might ask me. Unintelligible, I might say. Thanks for reminding me that the secret answer should as complex as possible so as to avoid being hacked by somebody.

Why don't you just remove it instead?

I am assuming you store the 'complex' password somewhere?

dothebeats

legendary

Activity: 3542

Merit: 1352

Cashback 15%

Quote from: ndnh on April 12, 2015, 01:14:18 PM

Quote from: dothebeats on April 12, 2015, 01:13:16 PM

Quote from: ndnh on April 12, 2015, 01:06:33 PM

Quote from: dothebeats on April 12, 2015, 01:03:00 PM

I just activated a secret question in my account and for some reason, I'm not quite sure whether I did the right thing or not, because the page simply reloaded without confirmation or whatsoever.

-Any questions in the "Secret Question" field will do, right?
-I see that the secret question that I chose was already saved in that once text box when I reloaded the page. Does that mean that the process is finished?
-Last question, why is it not recommended? Activating a secret question in my understanding means adding another layer of security in an account. But why isn't it recommended in this forum?

Quote

Anyone who guesses your secret answer will have access to your account. It's like a second password.

Does that mean that anyone who guesses the answer to the secret question will already have access to my account if he/she put it into the login text boxes? I'm kinda confused. Any reply will do. Thanks! Huh

I will check

Dang!!! I will remove my secret question.

Made a guess. Was wrong. Tongue

Oh now I see. That could easily snatch up my account. But apparently, the girlfriend that I'm talking about in that secret question do not exists, because, well, I don't have a girlfriend in the first place. But seeing that the secret question can easily be cracked once you know the answer, by any chance, is there any way to reset it? Or is there a limit on guesses before they'll send you an email?

lol. Guess what I exactly typed in?

"I don't have a girlfriend." Yes. Exactly.

Didn't work. Sad

Lol of course it wouldn't work! Again, is there any way to reset it? And are there any limits to how many guesses you can make?

Quote from: shorena on April 12, 2015, 01:10:57 PM

Quote from: dothebeats on April 12, 2015, 01:03:00 PM

I just activated a secret question in my account and for some reason, I'm not quite sure whether I did the right thing or not, because the page simply reloaded without confirmation or whatsoever.

-Any questions in the "Secret Question" field will do, right?

AFAIK its free text, yes.

Quote from: dothebeats on April 12, 2015, 01:03:00 PM

-I see that the secret question that I chose was already saved in that once text box when I reloaded the page. Does that mean that the process is finished?

That was my guess after I saw the question safed. Showing the answer would not be a good idea.

Quote from: dothebeats on April 12, 2015, 01:03:00 PM

-Last question, why is it not recommended? Activating a secret question in my understanding means adding another layer of security in an account. But why isn't it recommended in this forum?

It is not recommended if used like e.g. Paypal (still?) does:

"What was your mothers maiden name?" -> "Sand"

Thats terribly bad as a security mechanism as this can easily be brute forced or just asked with some social skills.

If you use something like this:

"What is the answer to the secret question?" -> "hHgTVFa6pFbpyq4Ryj55TEBH"

You essentially have a second password, that can be longer and more complex than your regular password.

Quote from: dothebeats on April 12, 2015, 01:03:00 PM

Quote

Anyone who guesses your secret answer will have access to your account. It's like a second password.

Does that mean that anyone who guesses the answer to the secret question will already have access to my account if he/she put it into the login text boxes? I'm kinda confused. Any reply will do. Thanks! Huh

Yes, anyone that knows the answer to the secret question can reset your password.

The answer that I put is pretty much complex if you might ask me. Unintelligible, I might say. Thanks for reminding me that the secret answer should as complex as possible so as to avoid being hacked by somebody.

shorena

copper member

Activity: 1498

Merit: 1499

No I dont escrow anymore.

AFAIK you can just put a new answer/question in. Use something like diceware to randomly generate a password and write it down somewhere safe.

ndnh

legendary

Activity: 1302

Merit: 1005

New Decentralized Nuclear Hobbit

Quote from: dothebeats on April 12, 2015, 01:13:16 PM

Quote from: ndnh on April 12, 2015, 01:06:33 PM

Quote from: dothebeats on April 12, 2015, 01:03:00 PM

I just activated a secret question in my account and for some reason, I'm not quite sure whether I did the right thing or not, because the page simply reloaded without confirmation or whatsoever.

-Any questions in the "Secret Question" field will do, right?
-I see that the secret question that I chose was already saved in that once text box when I reloaded the page. Does that mean that the process is finished?
-Last question, why is it not recommended? Activating a secret question in my understanding means adding another layer of security in an account. But why isn't it recommended in this forum?

Quote

Anyone who guesses your secret answer will have access to your account. It's like a second password.

Does that mean that anyone who guesses the answer to the secret question will already have access to my account if he/she put it into the login text boxes? I'm kinda confused. Any reply will do. Thanks! Huh

I will check

Dang!!! I will remove my secret question.

Made a guess. Was wrong. Tongue

Oh now I see. That could easily snatch up my account. But apparently, the girlfriend that I'm talking about in that secret question do not exists, because, well, I don't have a girlfriend in the first place. But seeing that the secret question can easily be cracked once you know the answer, by any chance, is there any way to reset it? Or is there a limit on guesses before they'll send you an email?

lol. Guess what I exactly typed in?

"I don't have a girlfriend." Yes. Exactly.

Didn't work. Sad

P.S. It can be reset by email alone or by answering the question alone. I don't how many tries possible tho.

dothebeats

legendary

Activity: 3542

Merit: 1352

Cashback 15%

Quote from: ndnh on April 12, 2015, 01:06:33 PM

Quote from: dothebeats on April 12, 2015, 01:03:00 PM

I just activated a secret question in my account and for some reason, I'm not quite sure whether I did the right thing or not, because the page simply reloaded without confirmation or whatsoever.

-Any questions in the "Secret Question" field will do, right?
-I see that the secret question that I chose was already saved in that once text box when I reloaded the page. Does that mean that the process is finished?
-Last question, why is it not recommended? Activating a secret question in my understanding means adding another layer of security in an account. But why isn't it recommended in this forum?

Quote

Anyone who guesses your secret answer will have access to your account. It's like a second password.

Does that mean that anyone who guesses the answer to the secret question will already have access to my account if he/she put it into the login text boxes? I'm kinda confused. Any reply will do. Thanks! Huh

I will check

Dang!!! I will remove my secret question.

Made a guess. Was wrong. Tongue

Oh now I see. That could easily snatch up my account. But apparently, the girlfriend that I'm talking about in that secret question do not exists, because, well, I don't have a girlfriend in the first place. But seeing that the secret question can easily be cracked once you know the answer, by any chance, is there any way to reset it? Or is there a limit on guesses before they'll send you an email?

shorena

copper member

Activity: 1498

Merit: 1499

No I dont escrow anymore.

Quote from: dothebeats on April 12, 2015, 01:03:00 PM

I just activated a secret question in my account and for some reason, I'm not quite sure whether I did the right thing or not, because the page simply reloaded without confirmation or whatsoever.

-Any questions in the "Secret Question" field will do, right?

AFAIK its free text, yes.

Quote from: dothebeats on April 12, 2015, 01:03:00 PM

-I see that the secret question that I chose was already saved in that once text box when I reloaded the page. Does that mean that the process is finished?

That was my guess after I saw the question safed. Showing the answer would not be a good idea.

Quote from: dothebeats on April 12, 2015, 01:03:00 PM

-Last question, why is it not recommended? Activating a secret question in my understanding means adding another layer of security in an account. But why isn't it recommended in this forum?

It is not recommended if used like e.g. Paypal (still?) does:

"What was your mothers maiden name?" -> "Sand"

Thats terribly bad as a security mechanism as this can easily be brute forced or just asked with some social skills.

If you use something like this:

"What is the answer to the secret question?" -> "hHgTVFa6pFbpyq4Ryj55TEBH"

You essentially have a second password, that can be longer and more complex than your regular password.

Quote from: dothebeats on April 12, 2015, 01:03:00 PM

Quote

Anyone who guesses your secret answer will have access to your account. It's like a second password.

Does that mean that anyone who guesses the answer to the secret question will already have access to my account if he/she put it into the login text boxes? I'm kinda confused. Any reply will do. Thanks! Huh

Yes, anyone that knows the answer to the secret question can reset your password.

ndnh

legendary

Activity: 1302

Merit: 1005

New Decentralized Nuclear Hobbit

Quote from: dothebeats on April 12, 2015, 01:03:00 PM

I just activated a secret question in my account and for some reason, I'm not quite sure whether I did the right thing or not, because the page simply reloaded without confirmation or whatsoever.

-Any questions in the "Secret Question" field will do, right?
-I see that the secret question that I chose was already saved in that once text box when I reloaded the page. Does that mean that the process is finished?
-Last question, why is it not recommended? Activating a secret question in my understanding means adding another layer of security in an account. But why isn't it recommended in this forum?

Quote

Anyone who guesses your secret answer will have access to your account. It's like a second password.

Does that mean that anyone who guesses the answer to the secret question will already have access to my account if he/she put it into the login text boxes? I'm kinda confused. Any reply will do. Thanks! Huh

I will check

Dang!!! I will remove my secret question.

Made a guess. Was wrong. Tongue

Edit: Funny. I didn't set one. (Was made more than a year ago) Probably explains why I still have this account. Wink

dothebeats

legendary

Activity: 3542

Merit: 1352

Cashback 15%

I just activated a secret question in my account and for some reason, I'm not quite sure whether I did the right thing or not, because the page simply reloaded without confirmation or whatsoever.

-Any questions in the "Secret Question" field will do, right?
-I see that the secret question that I chose was already saved in that once text box when I reloaded the page. Does that mean that the process is finished?
-Last question, why is it not recommended? Activating a secret question in my understanding means adding another layer of security in an account. But why isn't it recommended in this forum?

Quote

Anyone who guesses your secret answer will have access to your account. It's like a second password.

Does that mean that anyone who guesses the answer to the secret question will already have access to my account if he/she put it into the login text boxes? I'm kinda confused. Any reply will do. Thanks! Huh

Topic: SOLVED: A Question about setting a Secret Question (Read 469 times)