Checking who you are…
Reset sends nothing anywhere: the new password is shown to you once, and you pass it on to the account's own address.
No accounts yet.
No backups yet.
Send it to the account's own address, not to whoever asked, and ask them to change it after signing in. It is not shown again.