UK police believe the Swede sent the “potentially lethal” bomb after a password reset request was refused.