Base44 password reset link says "invalid or expired"

A customer opens the password reset link from the email and sees "invalid or expired", a blank page or an error.

Find out in 2 minutes which of these is breaking your app. Test my app, free

Why it happens

Base44 sends the reset email with a link to one fixed page on your app's domain, and each reset link works only once.

Possible causes

• The link was already used: reset links are single-use, so a second click shows the invalid or expired error.
• The reset page was renamed, moved or never created: the link always points to one fixed address and cannot be changed.
• The forgot-password page is missing, so there is no way to ask for a new email.
• The email never arrived: it went to spam, or the sender address is not on the person's safe list.
• Several people report it at once, which Base44 treats as a case for its support team.

You can't see it yourself

You're signed in, your customers aren't. You know the link is single-use and your own account is sorted. A customer clicks twice, or from a spam folder, and sees only an error.

Find out in 2 minutes which of these is breaking your app. Test my app, free

Related: The sign-up confirmation email never arrives · New users sign up, then land back on the login page or see an error · Base44 custom domain stuck on "Pending verification" or not loading

VibeFix is independent. Lovable, Bolt, Replit, Base44, v0, Supabase, Clerk and Vercel are trademarks of their owners.