Which of the following would be the most secure password reset process?

Question

Options

• AAsk users for their date of birth over the phone and reset their password.
• BAsk users to answer custom questions and send reset codes via text.
• CAsk users for their mother's maiden name and email them a reset link.
• DAsk users for their phone number and call them back with a PIN.

• A
  4% (2)
• B
  85% (39)
• C
  2% (1)
• D
  9% (4)

Explanation

The most secure password reset process among the given options is to ask users to answer custom questions and then send a reset code via text. This method combines something the user knows (the answer to a custom question) with something the user has (access to a personal device that can receive a text), which aligns with the security principle of two-factor authentication, increasing the security of the reset process.

No community discussion yet for this question.