Reset Password
Send this immediately after a password reset request. Keep the reset action obvious, tell the user when the link expires, and include a plain warning for anyone who did not make the request. Update the button URL, support contact, and security language before adding the message to your authentication flow.
Loops
Keep the reset action isolated
Pass the reset URL and expiry as required transactional data. Test the expired-link and missing-value states before publishing. The button should resolve to your reset domain, and the support link should work without requiring sign-in. Review the password reset examples before replacing the sample security language.