Magento – password request has expired

Customers are shared either per website, either across all websites, so at least, a customer account is usable on all of the store views that a website contains. Consequently, it is normal that the password reset link works for your store views.

In fact, if you would like to separate the customer accounts between your store views, you would have to create separate websites that would not share customers.

I had the same, but a second error message appeared which said that a required field is not filled out. In general: when anything goes wrong when saving the customer, the said error message "Your password reset link has expired" shows up. So, pay attention to any additional error messages showing up or in your log files.

If you want to find out what's happening in detail, go to the file "app/code/core/Mage/Customer/controllers/AccountController.php" and modify the method resetPasswordPostAction temporarily. Inside the } catch (Exception $exception) { directive, add Mage::logException($exception);. After you have seen the error again, you can find the real error message in the file var/log/exception.log.