Protecting account security settings using strong proofs

One or more computer storage media having stored thereon multiple instructions that, when executed by one or more processors of one or more computing devices, cause the one or more processors to:

• maintain both a password and multiple strong proofs associated with an account of a user;
• receive a request to change the password;
• and
• permit the requested change to the password only if the change is confirmed via one or more of the multiple strong proofs.

A system comprising:

• a user account information store that stores both a password as a normal proof and multiple strong proofs associated with an account of a user;
• and
• an account security control module configured to access the user account information store and to:
• in response to a received request to change a strong proof of the multiple strong proofs,
• attempt to confirm the request by notifying, using one or more of the multiple strong proofs, the user,
• permit the change if the request is confirmed, and
• keep the strong proof unchanged if the request is not confirmed;
• and
• in response to a received indication that all of the multiple strong proofs have been lost,
• communicate, using each of one or more of the multiple strong proofs, a notification using the strong proof,
• keep each of the multiple strong proofs as a strong proof if a response to one or more of the notifications is received within a threshold amount of time, and
• expire each of the multiple strong proofs if no response to the notifications is received within the threshold amount of time.