The authentication code is only sent to the username email address listed in the members profile. At no time is the authentication code listed in the username's Agon account.If a member's account was hacked, would the hacker have the ability to edit the profile? I don't know, just asking.
