A device, system, and method validates strength values for security questions associated with an online account. The method performed by an online service server includes receiving a security question data from a user device, the security question data being utilized for a user authentication to access an account of a user. The method includes performing a search, using third party sources, to generate search result data, the search result data being indicative of an availability value of responses to the security question data. The method includes determining a strength value of the security question data based on the search result data.