Two factor authentication has been added for withdrawals, transfers, and password changes(this will effect the account recovery option).
Implemented using GoogleAuth
I just activated this and tried it.
2 failed attempts, dont know why, then it worked like a charm.
What if I lose my phone?
Write down the code then... and don't lose your phone, but just in case you do then write down the code. You can then enter it into another phone.
Luckily I had not activated googleauth for one of the three things (I think "transfer") yet, so I could activate that and write down the code (assuming it's the same for all 3 actions).
With all 3 activated, however, where can I see the code?