In many cases, some of these answers can even be googled for fairly easily. In other cases, like "What was the first car you had", can be guessed randomly with

In many cases, some of these answers can even be googled for fairly easily. In other cases, like "What was the first car you had", can be guessed randomly with a relatively high chance of success (Toyota Corolla or Honda Civic probably cover a good amount of them). Some have taken to use random gibberish as the answer of these questions. Others have pointed out that that's also not great. What really would be good security questions? Should security questions as a concept even be a thing at all?