RISK Security questions can be weak because answers may be guessed, researched online, or known by other people. BEST PRACTICE Use answers that are not publicly discoverable. A password manager can store unique answers that do not have to be literally true. AVOID Do not use answers based on social media, family names, schools, birthdays, pets, or hometown details. KEEP THEM PRIVATE Never share security answers in chat, email, surveys, or social posts. REMEMBER Security questions are passwords wearing a fake mustache. Treat them with the same care.