Security question and answer.

[akwala]

In order to change my security question and answer, I did the following in the Account Related Settings form under Modify Profile:

• entered a security question and answer;
• entered my password and OTP (next to the "Change profile" button);
• clicked the "Change profile" button.

This resulted in the form getting re-rendered without any error, but with the following message in red, next to the security answer field:

You have a secret question set. This is not recommended.

The security question I had entered appeared in its field.

How can I change my security question and answer?

[retaur]

The old security question or the new one you tried to set?

Security questions aren't recommended because the common ones are either guessable or searchable (especially if you've multiple accounts with the same email, password and security question or someone that sends you a "questionnaire" that asks for information that could be the answer to your security question).

[Xal0lex]

PSA: ACCOUNTS WILL BE LOCKED IF THE SECRET QUESTION IS USED TO RECOVER IT

[JeromeTash]

Why would you opt for a security question when there is a much better option to secure your account via OTP.
"Security question" was an old account recovery method which is no longer in use. After the introduction of OTP a few years back, it's better you set it up to increase your account security