Implement password reset self service

[mellowagain]

This is totally possible if SMTP is enabled and configured but the question is how we would accomplish this when SMTP is disabled

[mayacopeland]

Similarly to how Discord and Steam handle 2FA, would it make sense to similarly have a 'backup' code generated and shown upon registration that can be used in order to reset a password, which is shown once and could be regenerated upon usage?

[mellowagain]

That sounds reasonably.