we have set procedures from which we do not, under any circumstances, deviate Fair enough. There's a subset of people who want that and would agree to that bef

we have set procedures from which we do not, under any circumstances, deviate Fair enough. There's a subset of people who want that and would agree to that beforehand. But, and here's an important "but", do not just display a checkbox and an Agree button. Instead display a sentence something like this: I UNDERSTAND THAT I WILL PERMANENTLY LOSE ALL ACCESS IF I FORGET MY PASSWORD AND MY RECOVERY KEY In order to agree to the terms, make the customer type out: I UNDERSTAND THAT I WILL PERMANENTLY LOSE ALL ACCESS IF I FORGET MY PASSWORD AND MY RECOVERY KEY BTW, don't allow "paste" into the reply field, try to enforce actual typing of characters. After you've done that, if a customer is later locked out, that customer will STILL be mad at you. It will be the providers fault that the customer can't get access. No matter how explicitly the customer agreed to the terms. That's human nature. I don't care how explicit you make it, you simply can't win this one.