The "forgot password" feature on a major global SW vendor site says the password will be sent to you registered email address. Another "forgot username" feature says the username will be sent to you registered email address. Of course, the email address is the username. Whether its confusing, or it never worked, doesn't matter. It's just tougher security, like a bricked router. Can't get any more secure than a bricked router.
