I won't deal with issues here, at least until it becomes core code.
| Quote:: |
• password recovery modified to eliminate confusing code entry
(relies on re-activation link only) |
It has to work that way to prevent malicious people from re-setting your password, and it works on my site - remember, passwords can contain letters, numbers and some other characters.