I would recommend strongly against that. You'd be far better off picking something plausible, so if someone does impersonate you it's obvious. Remember it's a

I would recommend strongly against that. You'd be far better off picking something plausible, so if someone does impersonate you it's obvious. Remember it's a human verifying this. The attacker just needs to answer: "oh, yeah i just spammed the keyboard with some jibberish" and he's in. The other thing I noticed by the attacker going after me, sometimes he'd call/contact the service multiple times in a row. All he needs to do is find out from 1 support rep that the reset password is randomly generated. Then tell another support rep that its "some jibberish" and he's in.