Bitcoin Forum
July 17, 2019, 07:21:51 AM *
News: Latest Bitcoin Core release: 0.18.0 [Torrent] (New!)
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: SOLVED: A Question about setting a Secret Question  (Read 382 times)
dothebeats
Legendary
*
Offline Offline

Activity: 1876
Merit: 1129

don't ruin my PCRs dammit.


View Profile
April 12, 2015, 05:03:00 PM
Last edit: April 12, 2015, 06:08:44 PM by dothebeats
 #1

I just activated a secret question in my account and for some reason, I'm not quite sure whether I did the right thing or not, because the page simply reloaded without confirmation or whatsoever.

-Any questions in the "Secret Question" field will do, right?
-I see that the secret question that I chose was already saved in that once text box when I reloaded the page. Does that mean that the process is finished?
-Last question, why is it not recommended? Activating a secret question in my understanding means adding another layer of security in an account. But why isn't it recommended in this forum?

Quote
Anyone who guesses your secret answer will have access to your account. It's like a second password.

Does that mean that anyone who guesses the answer to the secret question will already have access to my account if he/she put it into the login text boxes? I'm kinda confused. Any reply will do. Thanks! Huh

1563348111
Hero Member
*
Offline Offline

Posts: 1563348111

View Profile Personal Message (Offline)

Ignore
1563348111
Reply with quote  #2

1563348111
Report to moderator
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1563348111
Hero Member
*
Offline Offline

Posts: 1563348111

View Profile Personal Message (Offline)

Ignore
1563348111
Reply with quote  #2

1563348111
Report to moderator
1563348111
Hero Member
*
Offline Offline

Posts: 1563348111

View Profile Personal Message (Offline)

Ignore
1563348111
Reply with quote  #2

1563348111
Report to moderator
ndnh
Legendary
*
Offline Offline

Activity: 1288
Merit: 1001


New Decentralized Nuclear Hobbit


View Profile
April 12, 2015, 05:06:33 PM
 #2

I just activated a secret question in my account and for some reason, I'm not quite sure whether I did the right thing or not, because the page simply reloaded without confirmation or whatsoever.

-Any questions in the "Secret Question" field will do, right?
-I see that the secret question that I chose was already saved in that once text box when I reloaded the page. Does that mean that the process is finished?
-Last question, why is it not recommended? Activating a secret question in my understanding means adding another layer of security in an account. But why isn't it recommended in this forum?

Quote
Anyone who guesses your secret answer will have access to your account. It's like a second password.

Does that mean that anyone who guesses the answer to the secret question will already have access to my account if he/she put it into the login text boxes? I'm kinda confused. Any reply will do. Thanks! Huh

I will check Smiley


Dang!!! I will remove my secret question.






Made a guess. Was wrong. Tongue


Edit: Funny. I didn't set one. (Was made more than a year ago) Probably explains why I still have this account. Wink
shorena
Copper Member
Legendary
*
Offline Offline

Activity: 1484
Merit: 1315


No I dont escrow anymore.


View Profile WWW
April 12, 2015, 05:10:57 PM
 #3

I just activated a secret question in my account and for some reason, I'm not quite sure whether I did the right thing or not, because the page simply reloaded without confirmation or whatsoever.

-Any questions in the "Secret Question" field will do, right?

AFAIK its free text, yes.

-I see that the secret question that I chose was already saved in that once text box when I reloaded the page. Does that mean that the process is finished?

That was my guess after I saw the question safed. Showing the answer would not be a good idea.

-Last question, why is it not recommended? Activating a secret question in my understanding means adding another layer of security in an account. But why isn't it recommended in this forum?

It is not recommended if used like e.g. Paypal (still?) does:

"What was your mothers maiden name?" -> "Sand"

Thats terribly bad as a security mechanism as this can easily be brute forced or just asked with some social skills.

If you use something like this:

"What is the answer to the secret question?" -> "hHgTVFa6pFbpyq4Ryj55TEBH"

You essentially have a second password, that can be longer and more complex than your regular password.

Quote
Anyone who guesses your secret answer will have access to your account. It's like a second password.

Does that mean that anyone who guesses the answer to the secret question will already have access to my account if he/she put it into the login text boxes? I'm kinda confused. Any reply will do. Thanks! Huh

Yes, anyone that knows the answer to the secret question can reset your password.
dothebeats
Legendary
*
Offline Offline

Activity: 1876
Merit: 1129

don't ruin my PCRs dammit.


View Profile
April 12, 2015, 05:13:16 PM
 #4

I just activated a secret question in my account and for some reason, I'm not quite sure whether I did the right thing or not, because the page simply reloaded without confirmation or whatsoever.

-Any questions in the "Secret Question" field will do, right?
-I see that the secret question that I chose was already saved in that once text box when I reloaded the page. Does that mean that the process is finished?
-Last question, why is it not recommended? Activating a secret question in my understanding means adding another layer of security in an account. But why isn't it recommended in this forum?

Quote
Anyone who guesses your secret answer will have access to your account. It's like a second password.

Does that mean that anyone who guesses the answer to the secret question will already have access to my account if he/she put it into the login text boxes? I'm kinda confused. Any reply will do. Thanks! Huh

I will check Smiley


Dang!!! I will remove my secret question.






Made a guess. Was wrong. Tongue

Oh now I see. That could easily snatch up my account. But apparently, the girlfriend that I'm talking about in that secret question do not exists, because, well, I don't have a girlfriend in the first place. But seeing that the secret question can easily be cracked once you know the answer, by any chance, is there any way to reset it? Or is there a limit on guesses before they'll send you an email?

ndnh
Legendary
*
Offline Offline

Activity: 1288
Merit: 1001


New Decentralized Nuclear Hobbit


View Profile
April 12, 2015, 05:14:18 PM
 #5

I just activated a secret question in my account and for some reason, I'm not quite sure whether I did the right thing or not, because the page simply reloaded without confirmation or whatsoever.

-Any questions in the "Secret Question" field will do, right?
-I see that the secret question that I chose was already saved in that once text box when I reloaded the page. Does that mean that the process is finished?
-Last question, why is it not recommended? Activating a secret question in my understanding means adding another layer of security in an account. But why isn't it recommended in this forum?

Quote
Anyone who guesses your secret answer will have access to your account. It's like a second password.

Does that mean that anyone who guesses the answer to the secret question will already have access to my account if he/she put it into the login text boxes? I'm kinda confused. Any reply will do. Thanks! Huh

I will check Smiley


Dang!!! I will remove my secret question.






Made a guess. Was wrong. Tongue

Oh now I see. That could easily snatch up my account. But apparently, the girlfriend that I'm talking about in that secret question do not exists, because, well, I don't have a girlfriend in the first place. But seeing that the secret question can easily be cracked once you know the answer, by any chance, is there any way to reset it? Or is there a limit on guesses before they'll send you an email?

lol. Guess what I exactly typed in?

"I don't have a girlfriend." Yes. Exactly.

Didn't work. Sad

P.S. It can be reset by email alone or by answering the question alone. I don't how many tries possible tho.
shorena
Copper Member
Legendary
*
Offline Offline

Activity: 1484
Merit: 1315


No I dont escrow anymore.


View Profile WWW
April 12, 2015, 05:16:28 PM
 #6

AFAIK you can just put a new answer/question in. Use something like diceware to randomly generate a password and write it down somewhere safe.
dothebeats
Legendary
*
Offline Offline

Activity: 1876
Merit: 1129

don't ruin my PCRs dammit.


View Profile
April 12, 2015, 05:17:56 PM
 #7

I just activated a secret question in my account and for some reason, I'm not quite sure whether I did the right thing or not, because the page simply reloaded without confirmation or whatsoever.

-Any questions in the "Secret Question" field will do, right?
-I see that the secret question that I chose was already saved in that once text box when I reloaded the page. Does that mean that the process is finished?
-Last question, why is it not recommended? Activating a secret question in my understanding means adding another layer of security in an account. But why isn't it recommended in this forum?

Quote
Anyone who guesses your secret answer will have access to your account. It's like a second password.

Does that mean that anyone who guesses the answer to the secret question will already have access to my account if he/she put it into the login text boxes? I'm kinda confused. Any reply will do. Thanks! Huh

I will check Smiley


Dang!!! I will remove my secret question.






Made a guess. Was wrong. Tongue

Oh now I see. That could easily snatch up my account. But apparently, the girlfriend that I'm talking about in that secret question do not exists, because, well, I don't have a girlfriend in the first place. But seeing that the secret question can easily be cracked once you know the answer, by any chance, is there any way to reset it? Or is there a limit on guesses before they'll send you an email?

lol. Guess what I exactly typed in?

"I don't have a girlfriend." Yes. Exactly.

Didn't work. Sad

Lol of course it wouldn't work! Again, is there any way to reset it? And are there any limits to how many guesses you can make?

I just activated a secret question in my account and for some reason, I'm not quite sure whether I did the right thing or not, because the page simply reloaded without confirmation or whatsoever.

-Any questions in the "Secret Question" field will do, right?

AFAIK its free text, yes.

-I see that the secret question that I chose was already saved in that once text box when I reloaded the page. Does that mean that the process is finished?

That was my guess after I saw the question safed. Showing the answer would not be a good idea.

-Last question, why is it not recommended? Activating a secret question in my understanding means adding another layer of security in an account. But why isn't it recommended in this forum?

It is not recommended if used like e.g. Paypal (still?) does:

"What was your mothers maiden name?" -> "Sand"

Thats terribly bad as a security mechanism as this can easily be brute forced or just asked with some social skills.

If you use something like this:

"What is the answer to the secret question?" -> "hHgTVFa6pFbpyq4Ryj55TEBH"

You essentially have a second password, that can be longer and more complex than your regular password.

Quote
Anyone who guesses your secret answer will have access to your account. It's like a second password.

Does that mean that anyone who guesses the answer to the secret question will already have access to my account if he/she put it into the login text boxes? I'm kinda confused. Any reply will do. Thanks! Huh

Yes, anyone that knows the answer to the secret question can reset your password.

The answer that I put is pretty much complex if you might ask me. Unintelligible, I might say. Thanks for reminding me that the secret answer should as complex as possible so as to avoid being hacked by somebody. Smiley

ndnh
Legendary
*
Offline Offline

Activity: 1288
Merit: 1001


New Decentralized Nuclear Hobbit


View Profile
April 12, 2015, 05:49:30 PM
 #8


The answer that I put is pretty much complex if you might ask me. Unintelligible, I might say. Thanks for reminding me that the secret answer should as complex as possible so as to avoid being hacked by somebody. Smiley

Why don't you just remove it instead?

I am assuming you store the 'complex' password somewhere?
Muhammed Zakir
Hero Member
*****
Offline Offline

Activity: 560
Merit: 504


I prefer Zakir over Muhammed when mentioning me!


View Profile WWW
April 12, 2015, 05:51:00 PM
 #9

I guess there isn't any limit. I tried 5-6 times but didn't find get any time limit or warning.

Resetting your secret question:

• If you don't want to set secret question, make the secret question field blank in sertings, type your password and click update.
• To change your secret question, change question in secret question field & type answer and click update.

JarvisTechnology
Sr. Member
****
Offline Offline

Activity: 350
Merit: 250



View Profile
April 12, 2015, 05:56:57 PM
 #10

People can just bypass your password a security question is normally weaker so I would either have random letters in it to act as a 2nd password or just dont have one.

dothebeats
Legendary
*
Offline Offline

Activity: 1876
Merit: 1129

don't ruin my PCRs dammit.


View Profile
April 12, 2015, 06:08:03 PM
 #11


The answer that I put is pretty much complex if you might ask me. Unintelligible, I might say. Thanks for reminding me that the secret answer should as complex as possible so as to avoid being hacked by somebody. Smiley

Why don't you just remove it instead?

I am assuming you store the 'complex' password somewhere?

Yup. The answer is stored safely. Also, thanks for the idea that I can remove the security question and the answer as well.

I guess there isn't any limit. I tried 5-6 times but didn't find get any time limit or warning.

Resetting your secret question:

• If you don't want to set secret question, make the secret question field blank in sertings, type your password and click update.
• To change your secret question, change question in secret question field & type answer and click update.

Thanks Muhammed Zakir for the great reply. It greatly helped my understanding on this matter. I might as well locked this topic now because all of my queries are answered thoroughly.

Thanks for all of your replies! Cheesy

Pages: [1]
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!