zlacker

Let's please not. Password recovery flows are hard enough to get right and usually suck; adding username recovery on top of that doubles the opportunity for locking legitimate users out.

>>lxgr+(OP)
I don't know if I agree about the level of risk here. All password managers store passwords AND usernames.