Currently we do not have any password recovery system that would prevent us from making TONS of duplicate accounts.
Things to think about:
- Should we consider email-based auth?
- Is there way to avoid email-based auth?
- How game can be used to restore password?