You can prevent lockouts by using multiple forms of verification.