- Why does it keep saying invalid email address?
- What is the best practice time for password reset link expiration?
Why does it keep saying invalid email address?
Invalid emails can have typos or misformatting that do not lead to a legitimate inbox. This is common when would-be subscribers make accidental spelling errors when entering an email address on a form too quickly. An email can become invalid if the user changes their email, leaving the previous email without a user.
What is the best practice time for password reset link expiration?
Keep in mind that the Email (SMTP) server that you use may send Emails not immediately, but after some delay. Also the Email client of your user may have some delays between checking the server. So I recommend expiration time between 10 min and 1 hour.