I’m just recommending that folks treat the answers to the security questions, at a minimum, like they treat their passwords themselves. The security questions are a way around the password, and so they should be kept just as secure and hard to guess.
If you’re using a secure password manager, great, that’s exactly the best approach. The majority of people don’t, which is where this sorta thing becomes an issue. If you have a password manager and the service you’re using forces you to answer security questions, of course you can let the password manager generate something just as random as the password itself (provided it can remember it and can track which term corresponds to which question). For anyone who does not, it’s just important to choose something you’ll remember but no one who knows details about your life can simply guess. Otherwise it doesn’t matter how secure your password is.
I’m just recommending that folks treat the answers to the security questions, at a minimum, like they treat their passwords themselves. The security questions are a way around the password, and so they should be kept just as secure and hard to guess.
If you’re using a secure password manager, great, that’s exactly the best approach. The majority of people don’t, which is where this sorta thing becomes an issue. If you have a password manager and the service you’re using forces you to answer security questions, of course you can let the password manager generate something just as random as the password itself (provided it can remember it and can track which term corresponds to which question). For anyone who does not, it’s just important to choose something you’ll remember but no one who knows details about your life can simply guess. Otherwise it doesn’t matter how secure your password is.