why not add a pin code for login after the password so users who have your account cant get on it unless you have put in the pin code

same thing works for the site in order to login completly