Reset Password

Send this immediately after a password reset request. Keep the reset action obvious, tell the user when the link expires, and include a plain warning for anyone who did not make the request. Update the button URL, support contact, and security language before adding the message to your authentication flow.