> What's the secure password reset feature that Troy alludes to? I've seen a few concepts. One I liked was the selection of two or three images from a gallery

> What's the secure password reset feature that Troy alludes to? I've seen a few concepts. One I liked was the selection of two or three images from a gallery. If the user correctly identified the ones he had selected at sign-up then a new password was sent to the registered e-mail address. But any password reset process should ensure that it never links back to the original password. Reset, not recover.