to think these are ridiculous rules for memorable security checks

[cakeorwine]

You get asked 3 memorable questions so they will prompt you with these.

But...must be 8 - 12 characters. And no spaces. And must have a number afterwards. Or just be a number. And no special characters.
Questions include:
Memorable food
Memorable event
Memorable person
Memorable place

I must have misread it - as my first place was "too long" and I forgot to put a number in. As were my other phrases

It took me 3 goes - and who knows if I'll remember them next time

But it's ok - as their back up security is mother's maiden name!!

I almost gave up after 3 goes.

Seems they have mixed up password and security questions. Idiots.

There are far better ways of verifying someones identity when they put a password in instead of them having to put in a memorable phrase

I hope most businesses eventually move to an authenticator apps. I use a few who do and it's so much easier ( and, presumably, safer)

Authenticator apps are the devil's work.

Mother's maiden name is awful security and is based in sexism. Anyone who knows me (/my full name) knows my mother's maiden name.

I hate authenticator apps though - I don't want to download more apps to clog up my phone (and in many cases, collect data about me)! I don't want lots of businesses getting my phone number to be able to send me SMS verification either.

I use Yubikey authentication. You should see the effort to logon to Amazon. It certainly stops impulse purchases

Mother's maiden name is ridiculous. It's certainly not difficult for someone to find that out if needed.

Dh had an argument with the bank when they wanted him to give the normal security questions like first pet, and said they all had to contain a special character and a number.
He asked how many people names their pet "Bruno1#".

I suspect he wasn't the only person asking that as it changed shortly afterwards.

We had a cybersecurity training at work and the trainer said not to use your real maiden name for security as it's easy for criminals to find. Had never occurred to me to make one up but it totally makes sense!

He also said for any site that isn't going to absolutely need your real date of birth to change that too - at least the year. So obviously HMRC or banks or other official sites use the real one but for social media and retail just make one up. I'm 103 years old on quite a few now.