Do you know how many times I've had an account stolen? Zero times.
But I have on multiple occasions been randomly locked out of accounts, sometimes irrecoverably, despite knowing my username and password. It's always "we don't recognize you", "suspicious activity" or some shit. A username and password and an optional recovery email is all the security any website needs.
If you're a bank, okay maybe you can justify being extra careful. At least I know I can walk into my back to sort it out in person if need be. But for anything less sensitive than that it's retarded. As a user, losing access to my account due to haywire security systems is a much bigger threat than account theft and it needs to stop.
[–]Myocarditis-Man 3 insightful - 1 fun3 insightful - 0 fun4 insightful - 0 fun4 insightful - 1 fun - (1 child)
[–]IMissPorn[S] 1 insightful - 1 fun1 insightful - 0 fun2 insightful - 0 fun2 insightful - 1 fun - (0 children)
[–]cant_even 2 insightful - 1 fun2 insightful - 0 fun3 insightful - 0 fun3 insightful - 1 fun - (0 children)
[–]ID10T 1 insightful - 1 fun1 insightful - 0 fun2 insightful - 0 fun2 insightful - 1 fun - (1 child)
[–]IMissPorn[S] 1 insightful - 1 fun1 insightful - 0 fun2 insightful - 0 fun2 insightful - 1 fun - (0 children)