From Dev.to
Password Reset Email Security — 6 Required Fields for Customer Support Delivery
TL;DR: A secure password-reset email needs a recognizable sender, the account context, one single-use recovery action, an explicit expiry, a safe fallback for an unrequested message, and a delivery tr...