Comment by PhilipRoman

For that I think having a remote "reset password" option is more sensible. It would avoid issues coming from password reuse.