I'm curious why people still use their actual mother's maiden name for the answer for security questions: I just make something up and write it down on a piece of paper or store it in an encrypted file. It means I have to look it up to confirm my identity, but all in all I think that's worth it to eliminate the break-in risk (you do have the occasional odd conversation where you have to explain to a service rep "No, my mother's maiden name isn't really 'Winter is coming'").