There is no question: multi-factor authentication helps protect business-critical resources using password-based authentication. However, how can organizations successfully implement multi-factor authentication for password resets when not every user has a mobile device to verify their identity?