Password Reset Email Template

Variables

{{company_name}}

Product or company name

{{recipient_name}}

Recipient display name

{{reset_url}}

Single-use HTTPS reset link

{{expires_in}}

Human-readable link lifetime

{{support_email}}

Security or support address

{{company_address}}

Company mailing address

Implementation notes

• Never include a password or reusable credential in email.
• Invalidate older reset tokens when a new one is requested.
• Rate-limit reset requests without revealing whether an address has an account.

Use your renderer to escape untrusted values. Generate a meaningful plain-text alternative and test the final server-rendered message in recipient clients you support.