>(email is used when verification is necessary)

This sounds really insecure, many people know my email as I have it shared everywhere (as contact form, etc.), and using just email would mean anyone would be access my catchy account.

This looks very similar to https://sayable.co/ which requires you to remember exactly three words with no expiration.