Psssst! Your date of birth can be a random number!
CyberSecurity opsec · 14 comments · 300 words · Viewed ~2,845 times.
For lots of online accounts, a date of birth is nothing more than a very weak second factor.
The majority of places aren't checking your identity, cross-referencing your birthdate, and personalising your experience based on your Zodiac sign. At most, they'll wish you a happy birthday and / or let you recover your account by providing your date of birth.
But, of course, lots of people know your birthday. Everyone you went to school with, family members, colleagues. It might even be on your Wikipedia bio.
A date of birth is not a suitable security measure. So I set mine to be a random number.
Let's get a few things straight. Don't lie to the cops, the state, or your spouse. If you give an incorrect date of birth to an insurance company, medical provider, or financial institution; you're gonna have a bad time.
But for most other services...?
If I'm signing in to a free WiFi service, my date of birth is 1st of January, 1901 (or whatever the earliest year they will accept).
If a service uses my DoB for account recovery, I generate a random number, save it in my password manager, and tell the site I was born on 17/07/1985, or whatever.
Look, I'm aware there are some theoretical downsides. If you ever lose your fake details, you won't be able to prove your identity using official ID. If you use fake details to get an age related discount, that's probably fraud - so don't do that!
For the vast majority of services which have no legitimate reason for knowing your age, it's OK to use a random number.
Ian says:
mike says:
Owen says:
Dr. Watdaughter says:
According to Steam database, at least half of the users were born on January 1st.
Psssst! Your date of birth can be a random number! | Hacker News
@Edent but sometimes they check it is a real date so my default of February 29th 1900 gets rejected
@Edent I do this with security questions. As long as you give the correct specified answer to the correct specified question, the answer itself does not have to be factually correct to the question.
Mother's maiden name: Fortescue-Smythe-Johnson
@Edent I always use my sister's DoB. Different from mine and easy to remember
@Edent
Just making up things like your DofB, mother's maiden name, birthplace, etc. prevents identity stealers from just looking up that info and using the real information to answer online (or offline) security questions.
@Edent I used to do this with forums that required a D.o.B. The result is that, throughout the year I used to get an automated "Happy birthday from..." email.
Sadly, they seem to have stopped now
More comments on Mastodon.