Make a RSA key pair with each eq-emu account. Server keeps the public key(I say public but really only the server has access to it) and the user keeps the private key. When a user wants a password recovered, you can just send them the encrypted password or set up some challenge response authorization. Basically PGP.
|