Google has reduced account hijacking by 99.7% in last few years: http://googleblog.blogspot.ch/2013... But check the best practices at bottom of the post!