3 ms·
I don't know your specific situation, but most people use password-based sites that have an "I forgot my password" feature that authenticates based on email. T
by brlewis 18y ago
I don't know your specific situation, but most people use password-based sites that have an "I forgot my password" feature that authenticates based on email. Thus most people have a single point of failure already: their email account.
- extantproject 18y agoIf there's a security question I use a string of random characters as the answer and don't record it (which effectively disables the feature on most sites). You're right about email being central to authentication on the Web. This makes it important to protect.