My suggestion:
When you log in, you get a mail to your personal eMail
account with a one-time URL. You can only login via
this URL and a different password. This URL times out
after about 30 minutes, so if you do not log in within
these 30 minutes, the URL becomes invalid.
Best regards,
-Martin.