Common Issues auth

Password Reset Not Working

Users can't reset their passwords. The reset email never arrives, the reset link shows an error or has expired, or the new password doesn't save. This locks users out of their accounts.

Common Causes

  • Password reset email not configured in the auth provider
  • Reset link URL points to localhost instead of production domain
  • Reset token expires too quickly (sometimes set to just minutes)
  • Email service not configured (see 'Email Notifications Not Sending' guide)
  • The reset form submits but the API call to update the password fails

How to Fix It

  1. Test the full password reset flow yourself — request reset, check email, click link, set new password
  2. Check your auth provider's settings for the reset email template and redirect URL
  3. Verify the redirect URL in the reset email points to your production domain, not localhost
  4. Check if the reset token expiration is reasonable (at least 1 hour)
  5. Check server logs for errors when the new password is submitted

Real developers can help you.

Matthew Jordan Matthew Jordan I've been working at a large software company named Kainos for 2 years, and mainly specialise in Platform Engineering. I regularly enjoy working on software products outside of work, and I'm a huge fan of game development using Unity. I personally enjoy Python & C# in my spare time, but I also specialise in multiple different platform-related technologies from my day job. Prakash Prajapati Prakash Prajapati I’m a Senior Python Developer specializing in building secure, scalable, and highly available systems. I work primarily with Python, Django, FastAPI, Docker, PostgreSQL, and modern AI tooling such as PydanticAI, focusing on clean architecture, strong design principles, and reliable DevOps practices. I enjoy solving complex engineering problems and designing systems that are maintainable, resilient, and built to scale. Rudra Bhikadiya Rudra Bhikadiya I build and fix web apps across Next.js, Node.js, and DBs. Comfortable jumping into messy code, broken APIs, and mysterious bugs. If your project works in theory but not in reality, I help close that gap. Matt Butler Matt Butler Software Engineer @ AWS rayush33 rayush33 JavaScript (React.js, React Native, Node.js) Developer with demonstrated industry experience of 4+ years, actively looking for opportunities to hone my skills as well as help small-scale business owners with solutions to technical problems Richard McSorley Richard McSorley Full-Stack Software Engineer with 8+ years building high-performance applications for enterprise clients. Shipped production systems at Walmart (4,000+ stores), Cigna (20M+ users), and Arkansas Blue Cross. 5 patents in retail/supply chain tech. Currently focused on AI integrations, automation tools, and TypeScript-first architectures. Krishna Sai Kuncha Krishna Sai Kuncha Experienced Professional Full stack Developer with 8+ years of experience across react, python, js, ts, golang and react-native. Developed inhouse websearch tooling for AI before websearch was solved : ) Meïr Ankri Meïr Ankri Full-stack developer specializing in React / Next.js / Node.js with 6+ years of experience. I've worked across various sectors including automotive (Reezocar/Société Générale), healthcare (Medical Link SaaS), and e-commerce (Glasman). I build web apps end-to-end, from architecture to production, with a focus on scalability, performance, and code quality. I also mentor junior developers and contribute to technical decisions and code reviews. Jaime Orts-Caroff Jaime Orts-Caroff I'm a Senior Android developer, open to work in various fields Taufan Taufan I’m a product-focused engineer and tech leader who builds scalable systems and turns ideas into production-ready platforms. Over the past years, I’ve worked across startups and fast-moving teams, leading backend architecture, improving system reliability, and shipping products used by thousands of users. My strength is not just writing code — but connecting product vision, technical execution, and business impact.

Describe what's wrong in plain English. No technical knowledge needed.

Get Help

Frequently Asked Questions

The reset link says 'expired' immediately. Why?

The reset token expiration might be set too short, or the redirect URL is wrong causing the token to not be passed correctly. Check your auth provider's reset settings.

Users never receive the reset email. Where do I check?

Check your auth provider's email logs and your email service's delivery logs. Also verify your sender domain has proper DNS records (SPF, DKIM).

Related Common Issues Issues

Can't fix it yourself?
Real developers can help.

You don't need to be technical. Just describe what's wrong and a verified developer will handle the rest.

Get Help