Exactly. It allows people to easily reset their passwords if they've forgotten them while reducing their need to update their password if someone accidentally/maliciously attempts a reset.