I'm trying to think of different methods to restore an account to a user who can no longer access their email. For my project, regaining account access is very important, throwing away an account is not an option.
Current thoughts
- Make users wait a set time period (I'm thinking about 180 days) and each week email their email to see if theres any response (in the event it's an attempt to attack the account). (not overly fond of this one)
- Allow the users to submit personal information like an ID or Passport or possibly a video of themselves. (would need to do this before losing their account info)
- Allow them to set a backup email
- Allow them to set a backup password (where if you have this password you can get into the account regardless if you have the email or not.
Any ideas?