Recovery checklist

We send a short code to verify ownership. It expires quickly for safety.