Maybe it's better to add support for 2FA? If it is configured, then in addition to enter log!n and passw0rd you need also to enter an additional code (usually 6-digit) generated at regular time intervals (mostly every 30 seconds).
Although, your idea also may be good (as long as you have access to your ema!l when you want to change passw0rd), but wait for others to comment on it.