Users should receive an email with a link to reset their passwords. The email should have a one time token so that the link can only be used once.
Activity