Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

There seems to be an easy solution: use a password manager and save the answer to the question as an additional password.

(This is actually a FR to any password manager's product team: it's time to treat things like 2FA recovery code and secret question answers as first class citizen in your product).



Exactly. My mother's maiden name is "xGj5kLm9abM16q". Which is why she no longer uses it I guess?


That's what I do as well, but that defeats the purpose of the secret question being something only I know and will not forget. And that's because I am aware of the flaw of this system; someone naive might actually fill out that question with the honest answer and leave himself wide open to being exploited. Password manager are not a solution, they are a band-aid fix to a problem we should not be having in the first place.


KeepassXC already supports 2FA.


this is not 2fa though




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: