Over the last couple of years I have upgraded many of my passwords to stronger levels. And when I log onto important secure sites such as my bank or my investment sites, they use an image passmark so I can be sure I haven't somehow arrived at a bogus site. Since I rebuilt the computer and their systems didn't "recognise" my computer, even though I had the passwords correct, they challenged me with one of our pre-programmed questions.

What you describe is in place, perhaps you simply haven't encountered it yet.

I not only write down passwords, I make notes about the answers and date when I made the changes, so I can double check that they're asking me the right questions. But those pages live in a place that isn't next to the computer.

SRS