>due to these increasingly draconian requirements that are sprung upon us. I'm all for improving authentication, but it's profoundly annoying when authenticati

>due to these increasingly draconian requirements that are sprung upon us. I'm all for improving authentication, but it's profoundly annoying when authentication requirements are not made clear before logging in. For a user with a password manager, forcing a user to answer "security questions" will compromise UX at best, and reduce overall security at worst.