I believe that forcing people to use a different password when they try to recover is all wrong,poor memories.
Poor memories makes this bad and why would it need to be different, I could see a window asking are you sure you want to do that, but not a total prevention.
Ps
The email used is mine if I can claim it or rather if I want to.
2885th
ranked
John
shared this idea