Hi

We are having problems with users resetting passwords.

Our settings are as follows:

Min password length: 7
Password reset enabled: true
Enable password history: false
Enable password banned list: false
Enable password strength checking: false
Reset Link timeout: 1440

When users get a password reset link and try to change their password we get the following error:

Your new password was not accepted for security reasons. The password reset link has expired and is no longer valid

If you keep trying eventually you are able to change the password, but it is random as to whether it works or not.

Resetting the password in the user admin area as a superuser is also not working all the time. You have to try lots of times before it works.

This is causing us major problems with our client and their users.

Please help us fix this problem.

Thanks

Nick