We spent some time working on this for the security survey at SocialSci during signup -- since we don't associate your email to your account; its the only way for our participants to recover their password.
We did a lot of research and came up with a list of 20 security questions, tiered by quality and applicability. We present users the questions, and allow them to skip to a more desirable one.
Some highlights:
Who taught you how to drive?
How do you like your eggs prepared?
What was your first brand of cell phone? (a cell phone is required to have gotten this far)
How quickly after you were eligible did you get your drivers license?
What time of day were you born?
What is the name of the place your wedding reception was held?
Many of these questions are multiple choice, not fill-in-the-blank. We found that users are far more likely to recall what they would've chosen from the available choices vs what arbitrary text they entered into a field.
There are limits on recovery attempts; and limits on how much we tell you about what/how many you got wrong.
We did a lot of research and came up with a list of 20 security questions, tiered by quality and applicability. We present users the questions, and allow them to skip to a more desirable one.
Some highlights: Who taught you how to drive? How do you like your eggs prepared? What was your first brand of cell phone? (a cell phone is required to have gotten this far) How quickly after you were eligible did you get your drivers license? What time of day were you born? What is the name of the place your wedding reception was held?
Many of these questions are multiple choice, not fill-in-the-blank. We found that users are far more likely to recall what they would've chosen from the available choices vs what arbitrary text they entered into a field.
There are limits on recovery attempts; and limits on how much we tell you about what/how many you got wrong.
We require you to fill out 5 of these.