> I don't really want to store everyone's mother's maiden name or the name of the street they grew up on
Assuming the rationale behind this is privacy, you could always choose questions that don't divuldge sensitive information while still allowing the user to identify themselves e.g. a user might not want to share their street name but presumably would not care about sharing the name of their first stuffed toy.
Assuming the rationale behind this is privacy, you could always choose questions that don't divuldge sensitive information while still allowing the user to identify themselves e.g. a user might not want to share their street name but presumably would not care about sharing the name of their first stuffed toy.
OSWAP has a good article on security questions: https://cheatsheetseries.owasp.org/cheatsheets/Choosing_and_...