SecurityQuestionsResetForm
Contents
What to do if a user needs to reset the password for their Skysuite Account but they are unable to answer the security questions held for the account
Heading text
If a user is unable to answer the security questions for their account, they can complete a reset form and send it to us.
The completed form MUST come from the email address that is linked to the user's account, if it comes from a different email address, we will not act on the request - that may mean that the user needs to register for a new account, in which case so be it.
The user must send the completed form to us using: [email protected]; if ANYONE else is in distribution, be it a colleague, their line manager or the provisioning manager for their station (even if thats a SkylogistiX employee) we will not act on the request - the user will need to start over and choose new/fresh security questions. The questions should be personal and private and thus only the end-user should be able to successfully answer the chosen security question.
No one else should know what the security questions for an account are, only the owner of the account, hence why if the end-user has cc'd someone else on their email, we will reject the request.
If the account is suspected to be a group/shared account, e.g. used by everyone in a location then this is not something that we encourage - in that situation, we will ask each user to register for his/her own SkySuite account, thus the security questions should be personal and meaningful/relevant to the end user.
If the security questions are impersonal then we may reject the request, for example "What colour is the notice board above Dave's desk?" or "Who was most drunk at the 2019 Christmas office party?", e.g. they could be answered by anyone in the office at that location, we will reject the request. Similarly, if the questions are just plain stupid and easy to answer by ANYONE, e.g. "What is the answer to 1 + 1?" or "What is the capital city of England?", we will reject the request.
Examples of GOOD Security Questions
Example Question | Example Answer | Why its a GOOD Question Choice |
---|---|---|
What is my favorite football team? | Barcelona | Simple, one word answer and a question that should last with you for life. |
Name of my first ever dog? | Rover | Specific question with a single word answer that won't change over time. |
Surname of my first ever boyfriend/girlfriend? | Thomas | Specific question with a single word answer that won't change over time. |
My father’s first name? | John | Specific question with a single word answer that won't change over time. |
Examples of BAD Security Questions
Example Question | Example Answer | Why its a BAD Question CHoice | ||||
---|---|---|---|---|---|---|
What is my favorite color? | Blue | Can be easily guessed-at by others. | ||||
In what year was I born? | 1980 | Anyone that knows you can probably guess your age fairly accurately (it wont take too mamy attempts to guess it correctly). | ||||
What is the name of my boyfriend/girlfriend? | Jamie | This may not be a good choice (depending on how frequently your love life changes!) :-) | ||||
My first holiday? | Abergavenny, Wales, Summer of 1994 | Question is not specific enough and answer is too long and uses punctuation which may not be repeated the same way. To clarify, specifying “Abergavenny, Wales, Summer - 1994” would result in SkyLog rejecting your answer as it needs to be an exact match. | ||||
My first pet? | Gerbil called “Petal” | See previous note | ||||
What is my surname? | Smith | Too easy for ANYONE to answer | ||||
What is my password | London2012 | If you can’t remember your password in the first place then you won’t be able to answer your security questions! | - | What is my credit card PIN? | 1234 | Such information shouldn’t be posted on-line, it should be something known only to you and should not be shared / divulged. |
What is my social security number? | AB 00 11 22 C | Such information shouldn’t be posted on-line needlessly (unless it is required by a government agency or your employer for example). |