Talk:Forgot Password Cheat Sheet
Should we really be suggesting secret questions/answers in 2017? It's sort of a terrible mechanism, that largely provides little additional security benefit. There are much better options, notably 2FA.
- Glenn 'devalias' Grant (Sept 14, 2017)
Glenn, please see section 3. We explicitly discuss MFA as a critical step. Many companies who do a MFA workflow consider the secret questions step to be optional.
- Jim Manico (Sept 14, 2017)