We were told the primary verification is based on password strength. If your password was not easily hackable, then you can use email verification and login to change your password.

That did not happen, why?