The funny thing is the search space for most of these questions is so narrow. I mean, they ask for colors (how many are there? how many average person can name?

The funny thing is the search space for most of these questions is so narrow. I mean, they ask for colors (how many are there? how many average person can name?), city names, personal names, baseball teams, school mascots, etc. How easy is it to compile a dictionary for all of those? Probably won't take more than a day. > I've always given false info to those, when I bother to fill them out at all Average person, not trained in using password managers, won't do it. In fact, most password managers don't support those, so you need secondary secure storage. Chances of a layperson setting up one properly and consistently using it is close to zero. > Nevertheless, my attitude is that I'll just make sure to retain the password. The problem is, on some sites, if you know these questions you can just reset the password. Which is insane, but unfortunately happens.