Put it at the start of a short account-loss story, before the failed login is shown, so the request frames everything that follows. Follow a rejection with a funny laugh, then close a successful recovery with a correct answer sting to mark the win.