Request the link
Use Forgot Password from the sign-in page. The reset flow creates a one-use token and emails a secure reset URL when email delivery is configured.
Expiration
Password reset tokens expire after the configured window and are stored hashed rather than as reusable plaintext credentials.
Unexpected reset email
If you did not request the reset, do not use the link. You can continue using your current password unless you have another reason to believe the account is compromised.