> "I agree that nowadays, email is almost unanimously the way to verify a password reset, and hence all your eggs are already in one basket, but shouldn't there

> "I agree that nowadays, email is almost unanimously the way to verify a password reset, and hence all your eggs are already in one basket, but shouldn't there be further protections?" A few of the major webmail providers offer two-factor authentication, so that's one option to enhance protection. Here's some information about how to enable it for Gmail, Hotmail and Yahoo Mail: https://www.google.com/landing/2step/ https://www.google.com/landing/2step/ http://windows.microsoft.com/en-gb/windows/two-step-verification-faq http://windows.microsoft.com/en-gb/windows/two-step-verifica... https://help.yahoo.com/kb/SLN5013.html https://help.yahoo.com/kb/SLN5013.html