Ah ! I built this a few months back: https://github.com/rakoo/xauth https://github.com/rakoo/xauth It uses the same idea as in the post, ie the "lost password

Ah ! I built this a few months back: https://github.com/rakoo/xauth https://github.com/rakoo/xauth It uses the same idea as in the post, ie the "lost password flow for login", but with XMPP. The latter gives you much higher flexibility in that it actually is thought out as a programmable protocol. You try to login, the server sends a token to any of your connected clients via a bot message, you just repeat it to the bot and you're then granted access. I feel there is high potential here, and there even is an official XEP (http://www.xmpp.org/extensions/xep-0070.html http://www.xmpp.org/extensions/xep-0070.html) for this.