On: Securing your users' authentication

[tedunangst]

Users don't actually realize the implications of "you will never login without this key" until they forget the key. That doesn't happen at the moment of enrollment, but only the day after.