I suggest adding 2FA (two-factor authentication) in two ways: Using authenticator apps (for example, Google Authenticator) - provide a QR code and/or a secret key (ID) to add account to the app. Sending one-time six-digit codes to the email address linked to account. The code is valid, for example, 5 minutes, after it expires user can request a new one. Implementing this will make accounts more secure. This is important because if an account is hacked, the account owner is responsible for what happens. Thank you for your attention!