Currently the only way to reset your password is by having a forum account using the same IP as last used on your server account. We can then verify it's you and reset your password.
E-mail verification would be quite simple but I think a lot of players would skip this. Security question might be better.