I wanted to create a new topic on the issue of Security Questions.
Do you use a security questions feature on your forum to mitigate spam accounts? This is where people registering must answer a question that you defined with an answer that you have assigned to it.
Mine is Spell mapson backwards
and you can get an idea of what to do. I keep it simple so that I don't scare anyone off having to google it.
But how about you all? What are your questions and do you keep it simple?
I used to use security questions, but now I use cloudflare’s turnstile feature instead. The security question feature worked for a while for me, but I find cloudflare’s turnstile feature to be more effective in my niche.
I just rotate my security questions every few months and avoid using real answers—stuff like childhood pets or favorite teachers is easy to guess or find online. Instead, I use random phrases and store them in my password manager. Stresser https://ipstressthem.su/ helped me realize how vulnerable these preset questions can be to brute force or social engineering, so I treat them like passwords instead of actual trivia.