Don't know much about that, however I think it can be via e-mail (Crack email and send password reset link there.) And it can be via accessing the forum database. Correct me if I am wrong though!