Hover secures passwords with bcrypt and adds ID verification
help.hover.com
help.hover.com
The more complex piece is the identity verification tools we implemented. We previously used passwords as a crutch to determine with some certainty if the person on the other end of the phone was really the account holder. In retrospect that was just dumb, and my fault and my team has reminded me of that many times in the past 48 hours since the issue was initially raised here.
So again, thanks for all the feedback and holding us to a high standard so that we could get the the place where we should have been all along.