Password can be recovered through a private question