3 ms·

In addition, their email could be compromised, so resetting in the app after a login is preferable I think.