Security question answers like your first pet or hometown are often discoverable online. Treating them as extra passwords — with fictional, manager-stored answers — closes a common account-recovery back door.
“Answer security questions with lies only your vault remembers.”