Daniel from Marina del Rey
Level 1 (0 points)

Q: Forced Security Questions

I have a significantly long and secure password but I was forced to create three security questions.  These questions mostly related to things that are easily discovered and add a risk to my account that I do not want.  How can I remove these and only rely on my strong password?   It defeats the advantages of a strong password if anyone who knows me well enough can guess 2 of 3 of these questions. 

Posted on Jan 14, 2016 2:15 PM

by ckuan,Apple recommended
ckuan ckuan
Level 7 (34,344 points)
A:

It's not the questions, it's your answer that makes the difference.

Eg,

Q.: What's your favourite color:

A: Beetle, almighty.

Notice, you don't have to answer the question in the correct way. You just need to remember it, whatever it is.

Posted on Jan 14, 2016 2:27 PM

Close
Daniel from Marina del Rey

Q: Forced Security Questions

  • All replies
  • Helpful answers

Page 1 Next

  • by Niel,

    Niel Niel Jan 14, 2016 2:20 PM in response to Daniel from Marina del Rey
    Level 10 (314,481 points)
    Mac OS X
    Jan 14, 2016 2:20 PM in response to Daniel from Marina del Rey

    Set up a rescue email address if you haven’t already, go to a page which asks for the answers, and use the reset link even though you know them.

     

    (138390)

  • by ckuan,Apple recommended

    ckuan ckuan Jan 14, 2016 2:27 PM in response to Daniel from Marina del Rey
    Level 7 (34,344 points)
    Jan 14, 2016 2:27 PM in response to Daniel from Marina del Rey

    It's not the questions, it's your answer that makes the difference.

    Eg,

    Q.: What's your favourite color:

    A: Beetle, almighty.

    Notice, you don't have to answer the question in the correct way. You just need to remember it, whatever it is.

  • by léonie,

    léonie léonie Jan 14, 2016 2:24 PM in response to Daniel from Marina del Rey
    Level 10 (108,916 points)
    iCloud
    Jan 14, 2016 2:24 PM in response to Daniel from Marina del Rey
      It defeats the advantages of a strong password if anyone who knows me well enough can guess 2 of 3 of these questions.

    It is up to you what answers you pick for the security questions. You do not need to answer them truthfully, and then your answers are harder to guess.

    The security questions will be used, if your account has to be closed for security reason and you need to give Apple Support a call to get the account  activated again.  Apple Support will use these questions to confirm your identity.

  • by Daniel from Marina del Rey,

    Daniel from Marina del Rey Daniel from Marina del Rey Jan 14, 2016 2:35 PM in response to ckuan
    Level 1 (0 points)
    Jan 14, 2016 2:35 PM in response to ckuan

    Yes, I do this with a number of other sites which eventually requires a password manager.  It's very inconvenient  but most will answer these honestly which lowers security.

  • by Daniel from Marina del Rey,

    Daniel from Marina del Rey Daniel from Marina del Rey Jan 14, 2016 2:40 PM in response to Daniel from Marina del Rey
    Level 1 (0 points)
    Jan 14, 2016 2:40 PM in response to Daniel from Marina del Rey

    I've had an Apple account since .Net and .Mac....  I have been able to ignore this requirement until now as it no longer allowed me to manage the account until I set these.  Again, of course I could enter three more random answers but these security questions have historically been a weak point for many.  I would prefer to use a single strong password with optionally available two-factor authentication, as Google, gaming, and many banking sites have offered for some time.  Forcing security questions are not ideal.

  • by ckuan,

    ckuan ckuan Jan 14, 2016 2:43 PM in response to Daniel from Marina del Rey
    Level 7 (34,344 points)
    Jan 14, 2016 2:43 PM in response to Daniel from Marina del Rey

    It's an addition to your security.

    You should also use the 2 step verification for Apple ID

    Frequently asked questions about two-step verification for Apple ID - Apple Support

  • by Daniel from Marina del Rey,

    Daniel from Marina del Rey Daniel from Marina del Rey Jan 14, 2016 2:44 PM in response to Niel
    Level 1 (0 points)
    Jan 14, 2016 2:44 PM in response to Niel

    Thanks but I don't want to change them, I was making a suggestion that they remove the requirement and chose a modern solution to this issue.

  • by Daniel from Marina del Rey,

    Daniel from Marina del Rey Daniel from Marina del Rey Jan 14, 2016 2:57 PM in response to ckuan
    Level 1 (0 points)
    Jan 14, 2016 2:57 PM in response to ckuan

    Again, these have historically been a weak point for many who chose to answer them honestly.  There are better solutions.  I was mostly disgruntled from having to finally set them after many years of being able to ignore them.

  • by ckuan,

    ckuan ckuan Jan 14, 2016 2:59 PM in response to Daniel from Marina del Rey
    Level 7 (34,344 points)
    Jan 14, 2016 2:59 PM in response to Daniel from Marina del Rey

    Did you read the 2 step verification?

  • by ckuan,

    ckuan ckuan Jan 14, 2016 3:00 PM in response to ckuan
    Level 7 (34,344 points)
    Jan 14, 2016 3:00 PM in response to ckuan

    If that's not good enough, send a feedback to Apple.

    http://www.apple.com/feedback

  • by Daniel from Marina del Rey,

    Daniel from Marina del Rey Daniel from Marina del Rey Jan 14, 2016 5:35 PM in response to ckuan
    Level 1 (0 points)
    Jan 14, 2016 5:35 PM in response to ckuan

    I think you are missing the point but it is ok.  I'm not after stronger security, I'm suggesting they stop using security questions that are limited to well known subjects that most will answer honestly leaving themselves vulnerable.  If they must, make them optional.  I'm really not looking for a work-around to my original question, I know them.  I simply wondered if I " can I remove these and only rely on my strong password? "

  • by ckuan,

    ckuan ckuan Jan 14, 2016 5:53 PM in response to Daniel from Marina del Rey
    Level 7 (34,344 points)
    Jan 14, 2016 5:53 PM in response to Daniel from Marina del Rey

    Daniel from Marina del Rey wrote:

     

    I think you are missing the point but it is ok.  I'm not after stronger security, I'm suggesting they stop using security questions that are limited to well known subjects that most will answer honestly leaving themselves vulnerable.  If they must, make them optional.  I'm really not looking for a work-around to my original question, I know them.  I simply wondered if I " can I remove these and only rely on my strong password? "

    Sorry no, it's you missing the point what this forum is about.

    Read my previous post again.

    You can tell Apple about your wishes, we don't have to agree but nobody here can change what Apple does.

  • by gail from maine,Apple recommended

    gail from maine gail from maine Jan 14, 2016 5:57 PM in response to Daniel from Marina del Rey
    Level 7 (27,055 points)
    iCloud
    Jan 14, 2016 5:57 PM in response to Daniel from Marina del Rey

    As was suggested earlier, you can avoid using Security Questions altogether by using Two Step Verification:

     

    TWO STEP VERIFICATION

     

    Cheers,

     

    GB

  • by léonie,

    léonie léonie Jan 14, 2016 11:48 PM in response to gail from maine
    Level 10 (108,916 points)
    iCloud
    Jan 14, 2016 11:48 PM in response to gail from maine

    As was suggested earlier, you can avoid using Security Questions altogether by using Two Step Verification:

     

    TWO STEP VERIFICATION

    Will it work, if you have to talk to Apple's account security support team, because Apple disabled your account for security reasons? I had my password and my trusted devices, but only the answers to the security questions convinced Apple to enable my iTunes Store account again and to give me access to all my purchases.

    If someone gets hold of your credit card number and goes shopping with it at the iTunes store (using an arbitrary AppleID that is not your AppleID), Apple will disable all your AppleIDs using the credit card in question for security reasons. My password and my trusted devices did not help in that case, because someone else with a different AppleID  had been causing the problem. The security questions helped to prove my identity and get me my accounts and my money back.

Page 1 Next