Create a secondary admin account with a long, complex password stored in a physical safe or escrow. Use this only for emergency password resets.