What data elements are required to assist a user in resetting their password which reduces the possibility that someone else is impersonating the real user?

Kknowledge. It is important to explain to the user the reason for the additional factor, and that information publicly available about them isn't good for security.

1. Mobile or Email validation - Send OTP on Mobile or Email only.
2. Two factor Auth
3. Security questions