title: Should I make that re-set password link expire at a certain period of time?
body: <h1>Form</h1>
  <p><img src="https://i.stack.imgur.com/N6dJY.png" alt="enter image description here" /></p>
  <p>When my user is <code>forgetting</code> their password, I asked them for an email so I can send them the re-set password link.</p>
  <p>Right now I embeded the link into the btn, that link doesn't have any expiration time on it. But if they re-submit an email again, the I re-generate the link and override the old one.</p>
  <hr />
  <h1>Questions</h1>
  <ul>
  <li>Is what I'm having right now is secure enough ?</li>
  <li>Should I make that re-set password link expire at a certain period of time ?</li>
  <li>If so - What is the best practice to handle this ?</li>
  </ul>
  <p>Any tips / suggestions will be much appreciated.</p>