Send a link.
One-time use.

Enter your email. We'll send a reset link that expires after one use — no password guessing at the door.