Want everyone on your software team to learn this? Get completion tracking and compliance reporting with Hacksplaining for Teams. Free 14-day trial.
Password reset links should time-out in a reasonable time-frame. Imagine if a hacker gets access to your user's emails - the first thing they will do is try to compromise their other online accounts, and long-lived password reset links make this easier.