• Hey Guest!
    British Car Forum has been supporting enthusiasts for over 25 years by providing a great place to share our love for British cars. You can support our efforts by upgrading your membership for less than the dues of most car clubs. There are some perks with a member upgrade!
    **Upgrade Now**
    (PS: Upgraded members don't see this banner, nor will you see the Google ads that appear on the site.)
Tips
Tips

Hagerty login

Share this page

NutmegCT

NutmegCT

Great Pumpkin
Bronze
Offline
I just logged in to Hagerty to get some historical charts on various classic values. Not to change my insurance, but just to view the Valuation charts.

They've just "enhanced their security" by requiring users to create more authentication details. Once you enter your password, you receive an email from Hagerty. Click the link in the email, and you're taken to a "Complete your login" page. On that page you see three sets of questions, and you're asked to choose which question out of each section, and give an answer.

Questions like:

Who did you first kiss?
What was your mother's first pet?
What was your favorite car in college?

and about 15 more.

How the heck would you ever remember what you entered? Who did I first kiss? you mean mom and dad? or junior high girl friend, or first Significant Other, etc.

Remember, this is just to view all the charts and details (Comparables) on the tabs of the Valuation chart pages.

Agent suggested I just write down my answers to the chosen questions, and carry them around with me.

This is not good folks. Anyone else experience this at Hagerty? I shudder to think I'll need to go through this when I renew the policy.

As a friend told me recently, pretty soon computer network systems will be so secure, nothing will go in or come out at all.

yeesh

Good grief - is my brain fade even worse than I thought?
 
Tom- I just logged onto Hagerty to pay my premium and was met by the same security scenario that you describe. Honesty, it is not all that unusual today to answer security questions. Probably every online banking institution does it. In the end, it protects you since the "bad guy" probably doesn't know the correct answer to the security question that you answered. It was for the most part painless.
Now, who did you kiss? :frog:
 
The security questions are for your protection -- I see this as Hagerty taking the security of your information seriously. This is a positive thing.

Just remember, you don't have to answer them accurately, it's better to just make up answers.

Who was your first kiss? = Rutabaga!

And yes, you'll need to write them down. I deal with computer security issues in my day job and this need will not go away. As the "bad guys" get cleverer and more sophisticated, it becomes harder to protect against them. One thing the attackers will do is try and find the weakest link -- folks often reuse account names and passwords, so if they can get one, they can get into other higher-value targets.

Even as an IT guy there are days when I want that cabin up in Montana off the grid in the mountains. :grin:
 
I hear you on the need to increase security. But the idea of carrying your passwords and PINs and "security question answers" on a piece of paper seems to contradict the basic idea. I've worked with dozens of folks "of a certain age" at the air museum, who say it's becoming so frustrating to them they're giving up. And younger colleagues say they just use the same password for everything, and email their passwords and security question answers to themselves. One reaches a limit ...

Seems that if you use your correct login name, and a secure password, plus (1) *one* security question or (2) your account number, that would be enough.

(And just wait 'til the institution begins requiring password and security question changes every 90 days!)

image003.jpg
 
This is why security folks recommend the use of an electronic, encrypted password store. I have 200+ systems I need accounts for (the joys of working in IT), and most are unique. No way to remember them all. So they're in one place that uses strong encryption and a single, good password that I do have to remember.

No system is perfect, but it's the way we have to interact now. Security is always a trade between ease of use and strength, and it can be hard to plot the right course sometimes.

There's no easy answer, I'm afraid.
 
Back
Top