IdentityNow always uses strong authentication for password resets. This means that a stranger could only reset your password if they also had your phone or knew the answers to your security questions.
They'd also have to know your previous password. Without that information, if they reset your password, your vault - meaning your Launchpad and all the account information for those apps - would be cleared.
CAUTION: This can also occur if you are unable to provide your previous password when you reset it.
We also protect your IdentityNow account from brute force attacks by locking it if someone enters the wrong password too many times. In addition, we prevent IdentityNow password resets under certain circumstances.
For more information, see: