The answer is yes, and the TL;DR is not to use them, use 2FA, and not share personal details online (which is hopefully all obvious advice)
cross-posted from: https://lemmy.world/post/12060980
When I’m asked for a security question, I let my password manager generate gibberish and use those as answers.
I can’t honestly think of a less secure way to “secure” an account, than being asked questions that anyone you know would be able to answer with little effort.
no they are not, just another stupid article from proton. nothing stops you from saying that bwE0FpHb5iPzMZiismyeiTIWhoB*#V8SaD0F3R*SeH was your first pets name.
proton however stops you from disabling otp after setting up multiple security keys, they stop you from putting a pin on your drive app and they stop you from using an +4 digit pin on your mail app.
but yea, the potentially insecure thing they dont even offer is the biggest concernn here 🤦♀️
Nothing stops us enthusiasts from doing that, this article is for a more casual user who might not realise how easy the real answers are for a hacker to discover
no they are not, just another stupid article from proton. nothing stops you from saying that bwE0FpHb5iPzMZiismyeiTIWhoB*#V8SaD0F3R*SeH was your first pets name.
And how many regular people do that? Or does security apply only to advanced users?
