email them anew strong password. Yeah, and using PGP is a good thing. But it shouldn't be a requirement.