Comment by lolinder

It drives me absolutely crazy that the same bank website that times out my session after 5 minutes of inactivity insists that I set up recovery questions from a list that all amount to what is typically public information. I just save these as random values in extra fields in my password manager, but it's a ridiculous exercise for a website that thinks it's important enough to time out the session.