Guide · Base44
Base44 reset password link invalid or expired
Updated
A Base44 reset password link shows "invalid or expired" when it was already used: Base44 reset links are single-use. If the link leads to a blank page or an error, Base44 says to check that the reset page is at exactly /reset-password. The fix is a fresh reset email, and the reset page back at its exact path.
Why it happens
Base44 sends the reset email with a link to one fixed page on your app, /reset-password, and each link stops working once it has been used. People request from /forgot-password, which Base44 builds together with the reset page.
The causes, and how to fix each
1. The link was already used
Reset links are single-use. Once someone resets their password, the link in the email stops working, so a second click, or an old email, shows an error.
How to fix it
- Ask the customer to request a new reset email from the login page (Forgot password?).
- Tell them to use the newest email only.
Source: Base44: Managing login and registration
2. The reset page was renamed, moved or removed
The reset link always opens /reset-password. Base44 says that path is hardcoded and cannot be changed, and that if either /forgot-password or /reset-password is missing, the reset flow breaks.
How to fix it
- Check that your app has a page at exactly /reset-password and one at /forgot-password.
- If you renamed or moved either one, put it back at that exact path.
- Request a new reset email and test the whole flow on the live address.
Source: Base44: Managing login and registration
3. The email did not arrive, so the customer used an old link
Base44 says to start with the same checks as for a missing verification code.
How to fix it
- Ask the customer to check spam or junk, wait a few minutes, and check the address for typos.
- Add the sender to their safe senders list (no-reply@base44-apps.com unless you send from your own domain).
- Then request a new reset email from the forgot password page.
Source: Base44: Managing login and registration
4. The link opens your custom domain, and the domain is not working
If your app has a custom domain, Base44 puts that domain in the reset link automatically. The reset page has to load there.
How to fix it
- Open your custom domain in a private window and check that the app loads.
- If it does not, fix the domain first (see the Base44 custom domain guide below).
Source: Base44: Managing login and registration
5. Several customers report it at once
Base44's verification-code guidance, which its reset FAQ points to, says to contact Customer Care when several people report the same problem at once.
How to fix it
- Contact Base44 Customer Care with your app URL and the affected email addresses.
Source: Base44: Managing login and registration
Why you can't see it yourself
You're signed in, your customers aren't. You know the link works once and you open the newest email right away. A customer clicks twice, opens an old email from spam, or lands on a page you renamed.
Frequently asked questions
How long is a Base44 password reset link valid?
Base44's documentation for app users says reset links are single-use; it does not state a time limit for them. Once used, the link stops working and the customer needs a new one.
Why does my Base44 reset link open a blank page?
Usually because the reset page is not at exactly /reset-password. That path is hardcoded and cannot be changed.
Can I change the reset password page address in Base44?
No. Base44 says the /reset-password path is hardcoded. Do not rename or move it, or /forgot-password.
Where does a customer ask for a new reset email?
On the login page, via Forgot password?, which opens the /forgot-password page.
Can VibeFix fix it for me?
Yes, if you ask. The free check confirms the problem first. Our AI agent can find the cause, fix it in your code and re-check your live app: $79 for one bug, paid up front. If we can't complete your re-check, you get your money back.
Sources (official documentation)
Related guides
- Supabase confirmation email not sending: new users never get it (Lovable, Bolt, Base44)
- Supabase reset password email not sending: why a customer clicks "Forgot password" and gets nothing
- Why is my Base44 app not working? The documented causes, from a blank page to a 403
- Base44 custom domain stuck on "Pending verification" or not loading
- Google sign-in "origin_mismatch" error on my Base44 app
- New users sign up, then land back on the login page or see an error
VibeFix is independent. Base44 are trademarks of their owners.
Fixed it? Prove a real stranger gets in
A fix that works from your own account proves nothing about a new customer. Your AI reads your code. VibeFix signs up like a stranger.
Free check. Paste your live app's link: an AI agent signs up to your live app once as a brand-new person ("VibeFix Test") with a real inbox of its own, on a phone and on a computer, and shows how many problems a new user still hits, what each one is, and one screenshot. No account needed. It never changes your app and never emails your users.
Want it fixed?
Our AI agent finds the cause, fixes it in your code and re-checks your live app. $79 for one bug, paid up front. If we can't complete your re-check, you get your money back.
It starts with a free check that confirms the problem on your live app, no account needed.