We'll email you a secure link to reset it—the same flow used across Flash Services accounts.
For safety, we only send a reset when that email matches an account—so bogus addresses stay silent like on login/register.