No email, nothing to verify.
3 to 24 letters, digits or underscores.
At least 8 characters.
There is no password reset by email. You get one recovery code next; without it a lost password means a lost account.