<i>&quot;But SMS costs money!&quot; No, for most providers you can send an email to a special address reserved for the phone number. It will get translated to SMS automatically.</i><p>That&#x27;s mostly an US-only solution. In most countries, there&#x27;s no free email2sms gateway, since our incoming SMSs are free.<p>Also, I don&#x27;t want to share my phone number with you, random Internet site owner. Email spam is worse enough as it is.<p><i>&quot;But users will forget&#x2F;loose their reset number!&quot; Maybe, maybe not. It&#x27;s a cultural thing. You don&#x27;t expect them to loose access to their email, but that happens all the time.</i><p>They won&#x27;t lose or forget it; they just won&#x27;t save it in the first place, except maybe for a couple of very important sites. If people don&#x27;t use password managers, what makes you think they&#x27;ll manage some database (physical or not) of reset codes for each site they register for?