So. You have an outdated email address that you no longer have access to on your Barnes & Noble account, and you want to update it to a current address.
You can't. Because the only authentication method B&N will accept is a 6-digit one-time code sent to the old address. Even if you're already logged in. Even if they already let you update the password using your "security" question.
Customer service can't do it for you, either by phone or chat.
The only thing you can do is delete your old account. Except that you can't do THAT, either, for exactly the same reason. And neither can Customer Service.
So you go to create the new account and just hope nothing jams up because it conflicts with the old one. You HAVE to set a security question. And it has to be chosen from a fixed list — the usual list of Stupid Questions The Answers To Which Are Almost All Public Record. Ykou know, the kind of things you were warned NEVER to use as a a password.
So you pick the least awful question and start composing a non-obvious-yet-rememberable answer to it. And that's then you learn you're only allowed fifteen characters for the answer.
FOR FUCK'S SAKE, PEOPLE. Are you trying to ENSURE that you have identify breaches? :blobcatfacepalm: