No, not at this time.

The best password recovery configuration for your request is as follows:

On the Site Settings page, in the Security tab

• Set "Password Format" to "Hashed in db/Cannot Be Decrypted" (this will soon be the only option in mojo in upcoming release)
• Uncheck "Allow Password Retrieval"
• Check "Allow Password Reset?"
• Check "Require Password Change After Recovery/Reset"

When a user fills out the the "Forgot Password" form, the system sets the password to a newly randomly generated password and then emails the user with the password.

Then next time the user logs in they will be forced to reset the password again, making the password that was in the email defunct.

We might add an email token reset process in the future, but it's just not on the table right now.

Thanks,
Elijah