Common Issues
auth
Password Reset Not Working
Users can't reset their passwords. The reset email never arrives, the reset link shows an error or has expired, or the new password doesn't save. This locks users out of their accounts.
Common Causes
- Password reset email not configured in the auth provider
- Reset link URL points to localhost instead of production domain
- Reset token expires too quickly (sometimes set to just minutes)
- Email service not configured (see 'Email Notifications Not Sending' guide)
- The reset form submits but the API call to update the password fails
How to Fix It
- Test the full password reset flow yourself — request reset, check email, click link, set new password
- Check your auth provider's settings for the reset email template and redirect URL
- Verify the redirect URL in the reset email points to your production domain, not localhost
- Check if the reset token expiration is reasonable (at least 1 hour)
- Check server logs for errors when the new password is submitted
Real developers can help you.
Describe what's wrong in plain English. No technical knowledge needed.
Get HelpFrequently Asked Questions
The reset link says 'expired' immediately. Why?
The reset token expiration might be set too short, or the redirect URL is wrong causing the token to not be passed correctly. Check your auth provider's reset settings.
Users never receive the reset email. Where do I check?
Check your auth provider's email logs and your email service's delivery logs. Also verify your sender domain has proper DNS records (SPF, DKIM).