&gt; &quot;I agree that nowadays, email is almost unanimously the way to verify a password reset, and hence all your eggs are already in one basket, but shouldn&#x27;t there be further protections?&quot;<p>A few of the major webmail providers offer two-factor authentication, so that&#x27;s one option to enhance protection. Here&#x27;s some information about how to enable it for Gmail, Hotmail and Yahoo Mail:<p><a href="https:&#x2F;&#x2F;www.google.com&#x2F;landing&#x2F;2step&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.google.com&#x2F;landing&#x2F;2step&#x2F;</a><p><a href="http:&#x2F;&#x2F;windows.microsoft.com&#x2F;en-gb&#x2F;windows&#x2F;two-step-verification-faq" rel="nofollow">http:&#x2F;&#x2F;windows.microsoft.com&#x2F;en-gb&#x2F;windows&#x2F;two-step-verifica...</a><p><a href="https:&#x2F;&#x2F;help.yahoo.com&#x2F;kb&#x2F;SLN5013.html" rel="nofollow">https:&#x2F;&#x2F;help.yahoo.com&#x2F;kb&#x2F;SLN5013.html</a>