Everything you ever wanted to know about building a secure password reset feature

https://www.troyhunt.com/everything-you-ever-wanted-to-know/
The flowchart, ins and outs of password reset.