Ask for account details to verify
Commonly, systems ask for an email to send users a link or a phone number to send a code to recover the password. This data is usually enough to identify a person and help them restore their login information securely.
The process should be quick and painless, so avoid asking unnecessary questions and making them fill more than 1-2 fields. Otherwise, users may feel insecure or simply abandon the product.
Pro Tip: If users have already entered their email address or phone number on the previous login page, prefill this data on the reset password page to speed up the flow.
