Loading page
About this tool
Generate false but memorable answers to security questions so nobody can research their way into your account.
Security Question Answer Generator produces false but recordable answers — hyphenated passphrases, short invented stories, or high-entropy strings — for questions like 'mother's maiden name' that are matters of public record rather than secrets. It reports the exact strength of each answer in bits of entropy, calculated as log2 of the number of equally likely outcomes, and compares that with how guessable an honest answer would be. NIST SP 800-63B tells verifiers not to use knowledge-based authentication at all; where a service still insists, the accepted fix is to treat the answer as a second password.
Open Security Question Answer Generator on AltFTool — it loads instantly in your browser.
Provide your input — an image, text, or data.
Let the tool analyze or generate the result.
Review, refine, and reuse the output wherever you need it.
Every style shows its entropy in bits and the number of possible answers, not a vague strength bar.
Passphrase and sentence styles can be dictated over the phone; the random style is there when you can paste.
Answers are generated locally from a seeded generator — no request is made and nothing is stored.
Yes, and it is the standard security recommendation. The question is a shared secret, not a legal declaration, so the only requirement is that you can reproduce the answer later — which means recording it in a password manager next to the account. The one exception is a form that is part of a legal identity check, where you should give truthful information.
Because the answers are facts other people can find. NIST SP 800-63B states that verifiers shall not prompt for knowledge-based authentication, and Google's own research found a large share of answers to questions like favourite food were guessable within ten attempts. Maiden names sit in public marriage records, and pet names sit in your photo captions.
Around 35 to 40 bits of entropy is comfortable for an answer that is only ever checked through a rate-limited form — a five-word passphrase from this tool's 176-word list gives about 37 bits, roughly 169 billion possibilities. Use the high-entropy string style for anything protecting money or your primary email, since that is the account everything else resets through.
In the notes field of the password manager entry for that account, with the exact question wording copied alongside it. Storing them in a document, an email draft or your browser's autofill defeats the point, because those are the places an attacker who already has partial access will look first.