Email Glossary
Password Reset Email
A password reset email is a critical security email sent when a user requests to change their password. The email contains a time-limited, single-use link that allows the user to set a new password. These emails must be delivered quickly and reliably as users are often locked out of their accounts when requesting them.
Security Best Practices
Use cryptographically secure, time-limited tokens for reset links. Expire tokens within 15 to 60 minutes. Invalidate tokens after use to prevent replay attacks. Send reset emails only in response to a request initiated from the user's session or account. Do not send unsolicited password reset emails.
Related Terms
Get started in minutes
Need help with email deliverability?
Transmit handles authentication, warmup, and reputation isolation automatically.