title: What is a secure and efficient method for website users to reset their password?
body: <p>Many sites implement different methods and I am having a hard time deciding on which method would work best for my site.</p>
  
  <p>My user profiles contain the following data:</p>
  
  <pre><code>username
  password (in hash/digest form)
  email
  </code></pre>
  
  <p>I'd like the password reset method to be secure, user-friendly, and efficient.</p>