When the user indicates that they forgot their password, they should be prompted to enter their email and then be e-mailed a verification code (assuming there is a user on the DB with that e-mail). When they enter this code, they will then get the dialog to enter their new password.
When the user indicates that they forgot their password, they should be prompted to enter their email and then be e-mailed a verification code (assuming there is a user on the DB with that e-mail). When they enter this code, they will then get the dialog to enter their new password.