The best solution, rather than changing every website, is for banks to not offer email password resets. Email password resets are ok when you aren't taking some

The best solution, rather than changing every website, is for banks to not offer email password resets. Email password resets are ok when you aren't taking something that should be really secure like your bank account and transfering it to email. It seems almost criminally negligent of the bank.