Reset password
Change password flow with link in mail.
Send reset mail with a background service to mitigate the leak of data about what user has an account and who doesn’t (display “if there’s an account with that email, a password would’ve been sent” or something like that).