Password Reset Email Templates You Can Copy

Every SaaS with a login needs a password reset email. People read it closely: they're locked out and checking the message is real before they click.

Below are five password reset email templates you can copy, followed by what every reset email needs, how to adapt the wording, and how to have Claude Code build and send yours. For how the reset flow works inside your product, see our guide to setting up password reset emails for your SaaS.

Five password reset email templates you can copy

Swap the placeholders in square brackets for your own details, or hand a template to Claude Code to fill in. Change the expiry times to match your product.

1. Plain and clear

The best default for most SaaS products.

SubjectReset your [Product name] password

Hi [First name],

We got a request to reset the password for your [Product name] account.

Reset password button

This link works once and expires in 60 minutes.

If you didn't ask for this, you can ignore this email. Your password won't change.

The [Product name] team

2. Warm and friendly

For products with a relaxed, conversational voice.

SubjectLet's get you back into [Product name]

Hi [First name],

Forgotten passwords happen to everyone. Tap the button below to choose a new one.

Choose a new password button

The link is good for 60 minutes. After that, request a fresh one from the login page.

Didn't request this? No action needed. Your current password still works.

Questions? Reply to this email.

Your name or team name

3. Security-focused

For products that handle money, health information or business data. It shows when and where the request came from, so people can spot one they didn't make.

SubjectPassword reset requested for your [Product name] account

Hi [First name],

Someone asked to reset the password for your [Product name] account on [date and time, with time zone], from [browser] on [device] near [city, country].

If this was you, reset your password here:

Reset password button

This link works once and expires in 60 minutes.

If this wasn't you, don't click the link. Your password hasn't changed. If you think someone else has access to your account, contact security@yourcompany.com.

The [Product name] security team

4. A code instead of a link

For reset screens where people type a short code, which helps when they read the email on a different device.

SubjectYour [Product name] password reset code

Hi [First name],

Use this code to reset your [Product name] password:

482 913

It works once and expires in 15 minutes.

If you didn't ask for a code, you can ignore this email. Your password won't change.

The [Product name] team

Splitting the digits with a space makes the code easier to read and type, a tip from OWASP's forgot-password guidance.

5. "Your password was changed" confirmation

Send this right after someone finishes a reset. OWASP recommends it, and it lets anyone whose account was taken over act fast.

SubjectYour [Product name] password was changed

Hi [First name],

The password for your [Product name] account was changed on [date and time, with time zone].

If this was you, there's nothing else to do.

If it wasn't, reset your password from the login page right away and contact support@yourcompany.com so we can help secure your account.

The [Product name] team

What does every password reset email need?

A password reset email has one job: get the right person back in quickly, without helping anyone else.

Never include the old password or a new one.

Some important parts sit in how your product handles the reset, not in the email. OWASP's guidance recommends that each reset link is random, works once and expires; the forgot-password page shows the same message whether or not an account exists; repeated requests are limited; and people log in normally afterward rather than being signed in automatically.

For expiry, NIST's digital identity guidelines cap recovery codes sent by email at 24 hours. A shorter window, like 60 minutes, limits how long an old or forwarded email stays useful. You don't need to build any of this yourself; include it in your brief to Claude Code.

How do you customize a password reset email template?

Start with the template closest to your product's voice, then adjust:

• Name and sign-off: your product name and your usual sign-off.
• Tone: match your welcome email. Our welcome email examples show a range of voices.
• Expiry time: the number in the email must match what your product does.
• Link or code: a link by default, a code if your reset screen asks for one.
• Request details: use template 3 only if your product records time, device and location.
• Design: your logo and brand color, with the button first. Send a plain-text version too, for inboxes that don't show styling.

How to send password reset emails with Claude Code

Your SaaS sends reset emails through a transactional email service, which delivers the one-to-one emails your product triggers. SimpleSends is one built for people who build with Claude Code but don't write code. Its sign-up and help are written in plain English, without developer jargon, and after sign-up you do everything by talking to Claude Code. It links to Claude Code through a connector, built on MCP, a shared standard for connecting AI tools to other services.

1. Sign up on the SimpleSends website and follow the steps there to set up the email address you'll send from. To send from your own domain, this includes adding a few DNS records (settings that say who can send email for your domain) where your domain is registered.

2. In Claude Code, open Customize, then Connectors, choose Add, then Add custom connector. Fill in these details:

   Field	What to enter
   Name	SimpleSends
   MCP server URL	https://mcp.simplesends.com/mcp

3. When Claude prompts you to connect, log in to SimpleSends.

4. Back in the Claude Code chat, tell Claude Code: "I've connected SimpleSends for all transactional email." It takes it from there, including adding what your project needs to send email.

Then brief Claude Code, pasting in your chosen template:

I'd like password reset emails for my SaaS, using the template below in our brand colors. The link should work once and expire after 60 minutes. The forgot-password page should show the same message whether or not an account exists, and limit repeated requests. After a reset, send people to the login page and email them a short "password changed" confirmation. Show me previews of both emails first. Here's the template: [paste template]

Claude Code shows you previews, then builds the reset flow once you approve. Check the real thing too:

Send me a test of both emails so I can check them on my phone.

Once your SaaS is live, reset emails go out from your project automatically, at any hour, without Claude Code open. If a user says one never arrived, ask Claude Code: it can read your SimpleSends send logs and delivery status and help work out what happened. See how to check whether your emails actually sent and our email testing checklist. Password reset is one of around a dozen emails most products need; see the full list in 12 transactional emails every SaaS needs.