All,
I'm developing a small, non-commercial web app. I'm trying to decide how to help a user who might have lost their password. I need a mechanism that is, in order of priority:
- User friendly;
- Secure;
- Easily scalable across multiple geographies (i.e., location agnostic - so no SMS for example).
Please give 1 approach per answer and let's let the votes bring the best ones to the top.
Thanks,
JDelage