4 ms·
1. Disable the account from further access. 2. Send a postcard to the billing address where you signed up (verified against credit reports) with a one time ver
by op00to 3y ago
1. Disable the account from further access.
2. Send a postcard to the billing address where you signed up (verified against credit reports) with a one time verification code, upon which some second factor is set up. Maybe put 20 "rescue codes" on the postcard too, if you like.
3. Force user to enable some sort of second factor authentication on their next login.
- vel0city 3y agoImagine a service you paid for locking your account and sent a postcard to an address you haven't lived at in a decade. What a great user experience!