>They will ask you to verify via phone? Isn't that mandatory today. A suggestion I would make to anyone who is uncertain of how this works, and since it's a mo

>They will ask you to verify via phone? Isn't that mandatory today. A suggestion I would make to anyone who is uncertain of how this works, and since it's a moving target: once a year, test what it takes to compromise your own account. Ensure that you're comfortable with a recovery scenario of "I can demonstrate control over X to the automated recovery service." I did it a few years ago with my personal GMail account, which I had thought was well-secured, and it caused me to make significant changes to my security settings.