If a user enters their password wrong 3 times, you should automatically send them a password reset email to make it easier on them. This will make the password reset process a lot simpler and ensure that you don’t lose users because they can’t remember their passwords. The simpler the reset process, the more active users on your platform.