If you don't receive the security token, check your spam or junk folder. The email is from Elastic Email on behalf of Embassy Bank. The one-time registration password is forwarded to the email address that is on the cardholder record. The one-time Forgot Password security token is sent to the email address that you entered when registering in CardValet.