One option for "higher security" could be to have forgot-password services dial a pre-registered phone number to confirm your identity. Probably harder to inter

One option for "higher security" could be to have forgot-password services dial a pre-registered phone number to confirm your identity. Probably harder to intercept than an email account's password. This is how Google Voice asks you to confirm your phone number: an automated system dials your number and gives you a random numeric code which you have to enter on the website.