We'll email you a one-time reset link. It expires after an hour — no security questions, no phone number.