How does the security key add security if you can just click "I don't have my key" and get right to the security questions?
The security questions are generic in that you could investigate a person and find out the answers.
A better method would be to lock the account until the member calls PayPal and provides a second security password that would be set up in advance for this case.
If a user is smart, it doesn't matter what the questions are they can put random answers. Example ; if question 1 asks "What year was your mother born?" you can put answer "blablabla".
___________________________________________ Something with less than three legs, but more than two.
