Administrator-Initiated Password Reset Links Expire After 24 Hours
Administrator-initiated password reset links in emails to users
expire after 24 hours. Previously, these links did not expire. The new validity period also
applies to password reset links in emails sent before Summer ’18.
Where: This change applies to Lightning communities and Salesforce Tabs + Visualforce communities, accessed through Lightning Experience and Salesforce Classic, and all flavors of the Salesforce mobile app. Communities are available in Enterprise, Performance, Unlimited, and Developer editions.