Device security measures protect account even if phones wander off or taken