Prefer WordPress’s built-in password reset email first — it proves mail paths work end-to-end on HostStack hosting.
If mail cannot deliver, use cPanel-based database tooling carefully (phpMyAdmin) only when you understand hashing — editing wp_users incorrectly can brick login entirely.
Security plugins and MFA flows sometimes conflict during resets; temporarily disable strict plugins only when comfortable restoring access.