I'm working on a project whereby a certain level of anonymity is required for users. One of stipulations is that no email is used at all, as it makes the barrier to entry too high for people who want anonymity in this service but don't have an anonymous email account to hand.
One of the issues with this is that account recovery becomes painful if someone forgets their password. Security questions would end up being a massive security hole, as there isn't the burden upon the attacker to compromise the email account as well as guess the answers.
A potential method I'm considering is to give the user a file full of random data upon account creation, and have them use that as a token for resetting their account. The only issue I can see with that, though, is that people would likely lose the file.
What other options do I have?