title: Should security question answers be hashed?
body: <p>I'm working to a security system for a web application - admin section. If one admin want to make some important changes in application he will need to a answer to a security question.</p>
  
  <p>My question is: the answer to this question should be hashed in database? </p>
  
  <p>Also, I'm thinking to give to the administrators posibility to change their question/answer but admin could do this just if he confirm his identity using password. Is this a good approach?</p>