Using Easy-to-Guess Reset Questions
You’d be surprised just how much information and personal data you’re putting on the internet. You’ve probably posted pictures of your pet or your parents, for example. When you start thinking about it, password reset questions like your mother’s maiden name or your first pet don’t seem as secure.
While there’s only so much an attacker could do without access to your email, it’s still a best practice to choose harder reset questions or to keep from inadvertently posting those answers online. If you’re particularly security conscious, some experts recommend just inputting random answers that you write down somewhere.