This looks pretty secure to me. Most of the time, I just have to click forgot password and it is basically the same thing.