Skipping security questions and answers

Since recently, my iPad (but also iTunes on my mac) asks me for security questions and answers when I try to download an app. How can I download apps without providing these questions and answers?

Posted on Aug 10, 2013 12:40 AM

Reply
10 replies

Aug 10, 2013 7:02 AM in response to Paulfromnld

Paulfromnld wrote:


I don't want to provide these security questions and answers. I want to skip this, I've never had to do this before (and I've had this iPad for a couple of years now), I don't see any value in doing it now. I don't need a rescue email, I have my password (and I'm not forgetting it).

You can set up Apple's 2-stage verification on your trusted devices, and avoid the use of the security questions, if you wish to do so.


http://support.apple.com/kb/HT5570

Aug 10, 2013 6:59 AM in response to Paulfromnld

Apple introduced tougher security measures about a year ago. You have two choices: 1) answer the questions that are part of this enhanced security or 2) don't buy anything from the iTunes or App store. Should you go with option number two, you may also wish to consider a device that doesn't require that you purchase all your apps from the App Store.

Aug 10, 2013 7:40 AM in response to Michael Black

Thanks Michael, so it is possible without security questions. Unfortunately, I find the 2-stage verification even more worrying. I've accepted the situation as is and have picked three questions and have entered random data as answers to them.


To clarify my objections to these security questions:


These questions provide no additional benefit. I can pick a question and answer truthfully, but these are generally things others could find out (especially in targetted attacks, where the attacker tends to already know a bit about the victim - does anyone remember how Paris Hilton's T-Mobile account got accessed by attackers who knew her dog's name? (yes, that is an especially stupid example, but it shows the problem with these kinds of "security measures"))


Entering random data is already a lot better, however iTunes will simply show your (random) answer on screen instead of the regular dots you see when entering your password. Apple tells us to keep your passwords private and not share them with anyone (including family). If family is sitting next to you while you type your random data, they can easily read along.


As it stands, these security questions impose another hurdle for the user, not the attacker. Hence my attempt to circumvent this approach. I have a strong password and I have implemented safeguards to prevent forgetting it. The security questions do not improve my situation, they are an attempt at improving the situation of people that take security less seriously. These are the same people that provide all the answers to these security questions on their facebook (or whatnot) for all the world to see. Pointless.


(Note that the 2-stage verification is a better approach that solves the problems mentioned above. However, it comes with new downsides that I won't detail here as this is already way too long).


Anyway, thanks to all that responded. I have to say, suggestions of moving to another vendor seem somewhat ridiculous. That also means purchasing new devices when all I want to do is use my device (the device I've grown used to) as I have for quite some time. And there is no guarantee that such a new environment does not have similar stupid security measures in place.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Skipping security questions and answers

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.