A user can request to recover the password, and will be sent an email with a link where they can change their password and recover the account.