Suggestion/Idea

[kaneit]

I'd like to make a suggestion.

In regards to enabling 2FA, Changing password, Restoring passwords.
I feel it might be wise to ask for Username and Email for each one.
as for 2FA it only asks for Username, which i feel asking for both is more secure.

To restore password, it will ask for username and email.
To change password, it will ask for old password, new password, username and email.
To enable 2FA, it will ask for username and email.

Also could you please add.
Forgotten account and it will ask for email address which would then check the auth database.
which in return will send you the username of the single account you may have or multiple accounts you may have.