Why can't the link last for longer than 30mins?

[VivaLeBeaver]

It took over 12 hours for the email to come through. I wasn't online when it came so now its expired and I still can't reset my password.

Can't the link expire 30 mins after you click it rather than from when it was sent?

Hi Beaver,

We've spoken to tech and they've very kindly agreed to work on making the link last longer to give people a chance to log on. Hopefully this will solve some of the issues people have been having.

Thanks, ill ask for another email.

I actually like the short timescale. There are going to be umpty phishing emails floating around with 'change password' links so having a reset email hammering into your inbox with a 30 minute timescale at a time when you're presumably there and a-doing/expecting it reduces the chances for phishing compromises.

That assumes that the system isn't creaking with the load of course and that the reset emails aren't coming in wildly after the request. They're normally very prompt.

Like I said in my OP it took over 12 hours for the email to come. If it had come promptly it would have been fine.

Saying that the second email did come promptly. Typical! But I had visions of it taking 12 hours again.

Indeed. 12 hours later and I would have junked it and started afresh as well - but I think the MN system and the email providers' systems were all to heck on that night. The reset emails normally ping in to your email as soon as you can actually get in there which is acceptable.

I think the 30 minute limit was correct too for the reasons cozietoesie gives. The only problem was the delay getting the email.

That delay may not have simply been that things were overloaded. I'm fairly sure my provider has a built in roadblock. The idea being that if I send a million emails from my site it will send them say 50 at a time with a pause in between. I could send them faster, but I'd have to use a method meant for mass email.

I also received my reset email around 24 hours after I requested it so the link had expired. Interestingly though I am still logging in on my old password...

Fair point about the roadblocks. I know there are systems in place for inhibiting spam/bulk emails (although I haven't worked in the provider industry, I've been affected by them from time to time) and the whole net must have been hammered that night.