Password resets should be designed to provide users with a secure but user-friendly means of resetting their passwords. However, a better approach is to use passwordless authentication that makes password resets unnecessary.