How to Disable the Recovery Security Question in Okta

Disabling the recovery security question in Okta requires modifying the password policy settings in the Admin Console. Modifying the authentication settings for either Okta Classic Engine or Okta Identity Engine removes the security question as a recovery option.

• Okta Identity Engine (OIE)
• Okta Classic Engine
• Password Policies

What steps disable the recovery security question in Okta Classic Engine?

Disable the security question for account recovery in Okta Classic Engine by navigating to the authentication settings and updating the password policy.

1. Navigate to Security > Authentication.
2. Under Password, select the applicable password policy, choose the specific rule, and select Edit.
3. Under the Account Recovery > Self-service recovery options section, disable Security Question and select Update Policy.

NOTE: If the Security Question option is not available, contact Okta Support.

What steps disable the recovery security question in Okta Identity Engine?

Disable the security question for account recovery in Okta Identity Engine by editing the specific password policy rule within the authenticators menu.

1. Navigate to Security > Authenticators.
2. In the authenticator list next to Password, select the Actions drop-down and choose Edit.
3. Under Password, select the applicable password policy, choose the specific rule, and select Edit.
4. Under Recovery authenticators, disable Only Security question and select Update Rule.

NOTE: If the Security Question option is not available, contact Okta Support.