Every year, LL is already sending us an email to say "Hey, congratulations on another year in SL!" it's a fun little public relations routine, and I'm sure it helps with user retention, reminding folks about SL, and then they come back in to visit friends again, etc.

A recent discussion on the forums made me realize that we actually can't review our security questions. SL has never asked me, for example, to update my real-world mailing address (I know you have it on file!), or my phone number, or to even confirm that my recovery email is still valid.

That seems like a huge security oversight!

I joined Second Life on July 13, 2006. Am I expected to remember what I wrote down as my 'favorite food' 20 years ago?

In the past week, Apple and Google have both asked me if my recovery phone numbers and email addresses were still valid.

There should be an option to re-fill the 'security questions' from time to time, to update your account's contact info (I know I've moved half a dozen times since 2006!).. I don't have the same phone number, or the same email address.. and I have no clue what my favorite food or city might have been on that Thursday evening in the summer of 2006.

Alongside MFA and a strong password, an annual security review is just good practice.