Safer way to change account email address

Would be good to make it so that people have to verify their current account password and also insert a verification code that’s sent to their new email address in order to successfully change the account email address