When resetting a password, you would typically only need to enter the username or the email address, and not both. In this case, you will need to provide both.
This is because we hash your email address, which means that we do not know what it is.
When you provide us with your username and your email, we can fetch the hashed email value that we have associated with your username, hash your inputted email address, and check that it matches with what we have saved.
If it matches, we can send your password reset email to the inputted address and promptly discard it.