I like to think that if enough people ended up taking 10 minutes on a support call to validate someone’s identity, when it should take 10 seconds, maybe the companies would learn to stop asking stupid security questions. I like to think that, but in reality nothing will change.

Ah, yes, D7k3y2mHy5lZhbyHa St, I remember it well.

I use my password manager to generate the answer. My mothers maiden name is CzyHcjMKMfwT4tZ7HXbavQrOPo and my first pet was Avhu6FqPTRsWwafA, but we called him Avhu for short.

I know you said “no nextcloud”, but I often see posts from people who say nextcloud was overkill for them, but they don’t realise that almost every component of nextcloud can be uninstalled if you don’t want it. It can be pretty barebones if you want it to be.

I don’t see how you’re going to get away from the domain requirement, though, unless you’re just going to connect to your raw IP address? (And if you are, I didn’t think that nextcloud required a domain?)

Sorry I can’t be more helpful with a different solution, but hopefully someone out there knows of something that would suit your needs.