There’s no one ideal way for a website to let you recover a lost password — one which will always let you get back in without inordinate hassle, but which will never allow an imposter to compromise ...