Forgotten password

On the sign-in screen, Forgot password takes an email address and asks the host to send a reset link to it. The link and the reset page are the host system own, exactly as on the website, so the app never sees or sets the password. For safety the screen gives the same reply whether or not the address is on an account, so it cannot be used to find out who is registered; if the address is genuinely on an account, the email arrives within a few minutes, and the spam folder is worth a look. Follow the link, set a new password, then come back and sign in with it.