If you've enabled it, users who've forgotten their password or user-id, can request a hint (one they created when they signed up), or have their userid and password e-mail to them.