Common Issues auth

Password Reset Not Working

Users can't reset their passwords. The reset email never arrives, the reset link shows an error or has expired, or the new password doesn't save. This locks users out of their accounts.

Common Causes

  • Password reset email not configured in the auth provider
  • Reset link URL points to localhost instead of production domain
  • Reset token expires too quickly (sometimes set to just minutes)
  • Email service not configured (see 'Email Notifications Not Sending' guide)
  • The reset form submits but the API call to update the password fails

How to Fix It

  1. Test the full password reset flow yourself — request reset, check email, click link, set new password
  2. Check your auth provider's settings for the reset email template and redirect URL
  3. Verify the redirect URL in the reset email points to your production domain, not localhost
  4. Check if the reset token expiration is reasonable (at least 1 hour)
  5. Check server logs for errors when the new password is submitted

Real developers can help you.

Jared Hasson Jared Hasson Full time lead founding dev at a cyber security saas startup, with 10 yoe and a bachelor's in CS. Building & debugging software products is what I've spent my time on for forever Omar Faruk Omar Faruk As a Product Engineer at Klasio, I contributed to end-to-end product development, focusing on scalability, performance, and user experience. My work spanned building and refining core features, developing dynamic website templates, integrating secure and reliable payment gateways, and optimizing the overall system architecture. I played a key role in creating a scalable and maintainable platform to support educators and learners globally. I'm enthusiastic about embracing new challenges and making meaningful contributions. BurnHavoc BurnHavoc Been around fixing other peoples code for 20 years. Victor Denisov Victor Denisov Developer Milan Surelia Milan Surelia Milan Surelia is a Mobile App Developer with 5+ years of experience crafting scalable, cross-platform apps at 7Span and Meticha. At 7Span, he engineers feature-rich Flutter apps with smooth performance and modern UI. As the Co-Founder of Meticha, he builds open-source tools and developer-focused products that solve real-world problems. Expertise: 💡 Developing cross-platform apps using Flutter, Dart, and Jetpack Compose for Android, iOS, and Web. 🖋️ Sharing insights through technical writing, blogging, and open-source contributions. 🤝 Collaborating closely with designers, PMs, and developers to build seamless mobile experiences. Notable Achievements: 🎯 Revamped the Vepaar app into Vepaar Store & CRM with a 2x performance boost and smoother UX. 🚀 Launched Compose101 — a Jetpack Compose starter kit to speed up Android development. 🌟 Open source contributions on Github & StackOverflow for Flutter & Dart 🎖️ Worked on improving app performance and user experience with smart solutions. Milan is always happy to connect, work on new ideas, and explore the latest in technology. Simon A. Simon A. I'm a backend developer building APIs, emulators, and interactive game systems. Professionally, I've developed Java/Spring reporting solutions, managed relational and NoSQL databases, and implemented CI/CD workflows. Luca Liberati Luca Liberati I work on monoliths and microservices, backends and frontends, manage K8s clusters and love to design apps architecture Matt Butler Matt Butler Software Engineer @ AWS Matthew Jordan Matthew Jordan I've been working at a large software company named Kainos for 2 years, and mainly specialise in Platform Engineering. I regularly enjoy working on software products outside of work, and I'm a huge fan of game development using Unity. I personally enjoy Python & C# in my spare time, but I also specialise in multiple different platform-related technologies from my day job. MFox MFox Full-stack professional senior engineer (15+years). Extensive experience in software development, qa, and IP networking.

Describe what's wrong in plain English. No technical knowledge needed.

Get Help

Frequently Asked Questions

The reset link says 'expired' immediately. Why?

The reset token expiration might be set too short, or the redirect URL is wrong causing the token to not be passed correctly. Check your auth provider's reset settings.

Users never receive the reset email. Where do I check?

Check your auth provider's email logs and your email service's delivery logs. Also verify your sender domain has proper DNS records (SPF, DKIM).

Related Common Issues Issues

Can't fix it yourself?
Real developers can help.

You don't need to be technical. Just describe what's wrong and a verified developer will handle the rest.

Get Help