KH Authenticator Server implements WebAuthn, also known as FIDO2, instead of passwords. When you remove passwords, you remove the requirement of a confirmed email address for an automated forgot password process. I developed KH Authenticator, a .NET MAUI App for Windows and Android which registers and authenticates a user without a password or email address. The registration and login processes implement strict encrypted protocols between the server and browser or app to authenticate the user. To prevent account lock out I encourage you to register and evaluate multiple authenticators in Manage Account > KH Authenticators and Manage Account > Credentials.