Or, the old good way would be going to the database and in the CMS_User table clear the password columns for given account. Restart the application by doing a fake/dummy change in the web.config file and then log in using the user name and leave the password field empty.