Add a texted code for password reset. Many companies have the ability to reset a password via a code that is texted to a phone. With so many of our users who think email is a thing of the past or worst yet, a thing of the future, it is very hard to get them to log in and find that password reset email. If we had a dime for all the 15 minute lock outs we could retire.
Well said