Can anyone advise how long tokens for password resets last? Is it a 24 hour thing, 2 hour thing etc?
When setting up system password reset email to user, it would be good to be able show the time allowed on the email notification to the user, also on a webpage where password reset instructions are given (doing this on a largish site now). Thanks a bunch.