Inside Cloudflare: Preventing Account Takeovers https://blog.cloudflare.com/account-compromise-security-overview/