You don't even need the email address. The account name is enough to start the password request.