And don't forget to ensure that you can't change your email unless you're doing it from an authorized device. Otherwise a malicious person could just change the

And don't forget to ensure that you can't change your email unless you're doing it from an authorized device. Otherwise a malicious person could just change the email address where the notification emails are going to.