No to both of these. There are only three fields, and they must all be filled in: URL, username, password. But suppose your bank is HSBC, you could, make up something like "securityquestion://www.hsbc.com", "mom's name", "Jane Doe".