3 ms·

If an account that doesn't have this feature turned on is hijacked, the hijacker could turn this on to permanently lock out the owner of the account.

• sizzle 8y ago
  Great point, I wonder if you can solve this with manual identification like taking a picture of your face holding up a driver's license and paper saying you consent up password change?
  • bronson 8y ago
    It’s easy to fake an ID, especially if it doesn’t have to physically feel right.