Comment by YetAnotherNick

It's better than SMS based password recovery or "call support to reset your password". What do you suggest is the best approach.