Stop Hacklore (modern urban legends about digital safety)

Re:Stop Hacklore (modern urban legends about digital safety) by yegle on Sunday November 30, 2025 @08:40PM (#46102491)

There seems to be an easy solution: use a password manager and save the answer to the question as an additional password.

(This is actually a FR to any password manager's product team: it's time to treat things like 2FA recovery code and secret question answers as first class citizen in your product).

[ Parent | on HN ]

Re:Stop Hacklore (modern urban legends about digital safety) by eulgro on Sunday November 30, 2025 @09:54PM (#46103008)

Exactly. My mother's maiden name is "xGj5kLm9abM16q". Which is why she no longer uses it I guess?

[ Parent | on HN ]

Re:Stop Hacklore (modern urban legends about digital safety) by jeltz on Sunday November 30, 2025 @08:43PM (#46102510)

KeepassXC already supports 2FA.

[ Parent | on HN ]

Re:Stop Hacklore (modern urban legends about digital safety) by vrighter on Monday December 01, 2025 @01:13AM (#46104075)

this is not 2fa though

[ Parent | on HN ]

Re:Stop Hacklore (modern urban legends about digital safety) by HiPhish on Monday December 01, 2025 @01:45AM (#46104282)

That's what I do as well, but that defeats the purpose of the secret question being something only I know and will not forget. And that's because I am aware of the flaw of this system; someone naive might actually fill out that question with the honest answer and leave himself wide open to being exploited. Password manager are not a solution, they are a band-aid fix to a problem we should not be having in the first place.

[ Parent | on HN ]