# When a password reset link is expired?

**URL:** https://meta.discourse.org/t/when-a-password-reset-link-is-expired/84812
**Category:** Support
**Created:** [4월 8, 2018, 10:24오전 UTC](https://meta.discourse.org/t/when-a-password-reset-link-is-expired/84812 "2018-04-08T10:24:33Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![parisa](https://avatars.discourse-cdn.com/v4/letter/p/91b2a8/32.png) [@parisa](https://meta.discourse.org/u/parisa)
#### Post date: [4월 8, 2018, 10:24오전 UTC](https://meta.discourse.org/t/when-a-password-reset-link-is-expired/84812/1 "2018-04-08T10:24:33Z")

</div>

Every now and then, I get a complain from my users that password reset link is expired for them and they get confused. and I dont exactly know what is the reproduction steps. I thought maybe they send the password reset email twice at once and mistakenly click on the old (first email) link. But when I did this, both links worked correctly. When exactly the link expires?

---

<div class="post-metadata">

### Author: ![tophee](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/tophee/32/73406_2.png) [@tophee](https://meta.discourse.org/u/tophee)
#### Post date: [4월 8, 2018, 10:49오전 UTC](https://meta.discourse.org/t/when-a-password-reset-link-is-expired/84812/2 "2018-04-08T10:49:02Z")

</div>

While I’d say that an expired password reset link is not really a big issue (you can just request a new one), I do agree that it would make sense to include some expiry information in the relevant email templates. I was unable to find out that information though.

---

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [4월 12, 2018, 6:46오후 UTC](https://meta.discourse.org/t/when-a-password-reset-link-is-expired/84812/3 "2018-04-12T18:46:52Z")

</div>

The default is 48 hours. You can change the validity period with the `email token valid hours` site setting.

---

<div class="post-metadata">

### Author: ![system](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/system/32/443519_2.png) [@system](https://meta.discourse.org/u/system)
#### Post date: [8월 24, 2020, 12:34오전 UTC](https://meta.discourse.org/t/when-a-password-reset-link-is-expired/84812/4 "2020-08-24T00:34:00Z")

</div>



---

<div class="post-metadata">

### Author: ![Canapin](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/canapin/32/119591_2.png) [@Canapin](https://meta.discourse.org/u/Canapin)
#### Post date: [9월 30, 2020, 10:00오전 UTC](https://meta.discourse.org/t/when-a-password-reset-link-is-expired/84812/5 "2020-09-30T10:00:19Z")

</div>

내 사용자 중 한 명이 이 문제를 겪고 있는 것 같습니다. 그는 비밀번호를 재설정하려고 했지만 실패했고, 저에게 이메일을 보냈습니다:

> 이메일을 기다린 후 링크를 바로 사용했는데, 지금까지 두 번 모두 정보가 오래되었고 만료되었다고 응답합니다.

🤷‍♂️

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [9월 30, 2020, 10:27오후 UTC](https://meta.discourse.org/t/when-a-password-reset-link-is-expired/84812/6 "2020-09-30T22:27:28Z")

</div>

그의 컴퓨터 시계가 틀린 건가요? 서버 시계가 틀린 건가요?