> However, this method can't really be used everywhere — not all emails are encrypted up to the point where the recipient reads them. Neither are password-rese

> However, this method can't really be used everywhere — not all emails are encrypted up to the point where the recipient reads them. Neither are password-reset emails… This is no more or less secure than sending password-reset emails; any additional security intended to protect in the case of password resets can be applied to login as well (e.g. SMS or landline contact, knowledge of shared secrets of varying security).