Haha, I definitely don't take that as being an ass, it's an important question and it's part of an area that we're trying to improve. We have a section of our

Haha, I definitely don't take that as being an ass, it's an important question and it's part of an area that we're trying to improve. We have a section of our website clef.io/lost where you go when you lose a phone. It asks for your email and PIN, then sends an email to you confirming the deactivation. If you click on the link in your email, the phone is immediately deactivated. If you open the app and enter your PIN, the deactivation is canceled. We want to make sure that an attacker has a hard time deactivating your account, but that you are able to quickly deactivate it when you need to. In the long run, we do not want to rely on email, and so we will need to move to a paradigm of trusted computers or other methods of valid-user-identification.