Based On CONF-8078, if a user goes through the 'Forgotten Password' process, confluence will attempt to generate a new password.

Confluence will then attempt to save the password which may not be accepted by crowd because it doesn't match the regular expression.

Based on code-reading this would throw an error message back to the user and not update (or email) anything.