There is no tutorial that explains how to set this up, it is actually quite complex. I would recommend generating the page through the wizard to use the page the wizard generates as a guide.
With encrypted passwords, there are 2 parts:
1) Create a form that the user enters their email address in, the Add the Security Assist Email Encrypted password behavior. In the Email Encrypted password behavior make sure to go to the email object tab and enter the correct SMTP Server information.
the email that is sent will include a link to the return page that is set on the general tab.
2) On the return page, you will need to create a form with a field for entering the email address, and the new password, and to confirm the password.
add the Security Email Encrypted password return behavior to lookup the user record based on the retune link.
And you will need to add an update record behavior to up[date the user record.
