[Deukhoofd]

tootctl accounts modify USERNAME --disable-2fa --reset-password

Then check your mail server for outgoing mail, and use the mail sent to the user to change the password.