Forgetting a password can be a frustrating experience for users and a security concern for developers. A secure password reset system ensures that only the rightful account owner can regain access, using phone numbers instead of emails adds an extra layer of security and accessibility. This tutorial builds a secure password reset system in CakePHP using Twilio Verify backed by a MySQL database, generating one-time verification codes to users' phone numbers, validating those codes, and securely updating passwords. The application requires PHP 8.3, Composer, access to a MySQL database, basic knowledge of or experience with CakePHP, a Twilio account, and a preferred text editor or IDE and web browser. It sets up a Verification Service on Twilio, connects to the MySQL database, stores Twilio credentials as environment variables, creates a database entity and model, generates the controller, UI template files, and adds route configuration. The application is tested by registering a new user and inputting their phone number to receive an OTP code, which is then verified to update the password.