I do not think it’s anything to do with WordPress thinking you are a hacker.
I had to create an account to be able to answer this question and I got the same problem and fixed it…
I identified the problem was due to the fact that the password reset link (my test was on a mobile device) includes the greater-than sign ( > ) at the end. If you click the link to let the page load, you can then edit the URL and remove the greater-than sign. Once I removed it and submitted the URL to load the page again, I was able to change my password and login.
Hope that fixes the problem for you all.
