The only truly secure solution is to not allow any recovery at all. Lose your token or forget your password, lose access to the account permanently. Since this is pretty useless for most people, you ...
Multi-factor authentication is an absolute must if you really want to add another layer of security to your online accounts. Even the popular password management tool LastPass is dealing with security ...