When a user loses access to an online account, a common feature in many sites is a password reset feature via email. While an email based account password reset can work for users, it’s not a particularly secure approach. Facebook wants to help improve the state of account recovery with a new open-source Delegated Recovery protocol.