So I was again resetting one of my thousands of accounts because I didn't remember the password and I wondered about passwords in general. I have simple question.Why do we not use one time pin codes sent via mail for logging into websites?As in: enter your login name and the system sends a pin to your email which is valid for 5 minutes and stops working after login.So far I don't see the security risk since we have the option to reset a password with the email anyways. If someone gains access to your mail, you always lose.I must be missing something.. what is it?