How Many People – Besides You – Can Answer Your Security Questions?

Abstract

To determine if someone other than the user who needs to reset a user ID or password might be able to answer security access questions to accomplish the reset, I conducted a quantitative study survey that resulted in responses from 390 people with different levels of expertise in computer use. The results show that for most of these common password reset questions, participants knew the answer for one or more persons.