I just want to ask general opinion here. One of the companies I deal with rolled out new security features for login to the website.
Part of this new system is selecting security questions with security answers in case the password is forgotten.
However, the only answers allowed are from the pick list 18-35 items long. For example, they ask what is your favorite color and give you about 18 colors to choose from.
Also, they still allow 4 digit pin to be used together with the password, which to me obliterates any good password generated by 1PW. No way to opt out of the pin. Either the pin or the password allows login to the account on this company website.
So my questions are:
How unsecured is using pick list of answers limited to such a small set?
How unsecured is using 4 digit pin in addition to password.
Thank you for your opinion and discussion of the subject.
1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Sync Type: Not Provided