title: Password reset by sending an SMS
body: <p>Im designing a password reset system where the user can provide en email and phone number, and a verification code will be sent by SMS. However I just noticed a flaw in this system. If somebody knows my email, they can just type it in and reset it with their phone. Is there some way this can be securely implemented?</p>
  
  <p>I dont have any code, this is more of an abstract question.</p>