"Reset token is invalid or expired"

What it means

You clicked a password-reset link and the page said the reset token is invalid or expired. The link no longer matches an active reset request. The password has not been changed.

Common causes

• It is older than one hour. Reset links expire 1 hour after they are sent.
• It was already used. Each link works once.
• You asked for a newer link since. Only use the most recent email.
• The link was broken when copied — some mail programs wrap a long link across lines or add stray characters. Oris Work tolerates most of this, but a truncated link will still fail.
• If the page just says "Invalid reset link", the address had no token at all; open the email and click the button again.

Get a new link

• Go to the login page and choose the forgot-password link, or open the "Reset your password" page.
• Enter your work email and click "Send reset link".
• The page always says "Check your email" and "If an account exists for this address, you will receive a password reset link shortly." This is on purpose so nobody can use the form to find out which emails have accounts.
• Open the newest email (subject "Reset your Oris Work password") and click "Reset Password" within the hour.
• Enter and confirm a new password (at least 8 characters) and click "Reset password". Then sign in.

If no email arrives

• Check spam or junk and any company quarantine.
• Make sure you typed the address you sign in with.
• Wait a couple of minutes and do not request many in a row: reset requests are limited to 10 per minute.
• Ask a workspace admin whether your account is active.

A similar message for invitations

Team invitations show "Invite link is invalid or expired". Invites last 7 days and work once. Ask an admin to send a fresh one from Settings → Team.