The password reset email is one of the most-clicked transactional messages your platform sends. Customising it for clarity, brand fit and trust is a low-effort, high-impact change.
The Default Template
Out of the box the template includes a greeting, a brief explanation, the reset button (with the unique tokenised URL), an expiry note, and a security disclaimer. Tokens used:
{{user.firstName}}— the user's first name (or “there” fallback).{{resetUrl}}— the unique reset link, valid for the configured lifetime.{{tokenExpiry}}— the expiry timestamp in the user's timezone.{{site.name}}— your platform's name.{{requestIp}}— the IP that initiated the reset (optional, useful for security).
Editing the Template
- Open Architect Panel → Email Templates.
- Find password_reset and click Edit.
- Adjust the subject (e.g. “Reset your YourBrand password”).
- Edit the body. Keep the reset URL prominent — most users glance and click.
- Send yourself a test before saving.
Best Practices
- Single primary CTA — one clear button, no distractions.
- Show the originating IP/location — deters phishing (“if you didn't request this from {{requestIp}}…”).
- Include a fallback URL in plain text — some email clients suppress buttons.
- Mention the expiry — “This link expires in 30 minutes” reduces support tickets.
- Sign with your domain — signed mail with consistent sender reputation lands in inbox, not spam.
Worked Examples
- Consumer app: Casual tone, friendly opener, branded header image.
- Financial app: Formal tone, includes IP/location, prominent “If you didn't request this, contact support immediately” warning.
- Healthcare: Includes a phone number for verifying authenticity by call.