Why was my password reset email never delivered?

Last updated May 20, 2026Account & security

When you click Forgot password on the Valid Email Checker login screen and the email never shows up, the most common explanation is mundane — spam folder, typo in the address, corporate mail gateway, or your account is actually on a different email than you think. The handle-password-reset edge function will return the same generic success message regardless of whether the address you entered matches a real account, so the absence of an arrival is not by itself proof that the request did anything wrong.

Why we return success either way

If the API responded differently for valid and invalid addresses, an attacker could enumerate which emails have VEC accounts simply by submitting them through the reset form. The response is intentionally identical: "If an account exists with this email, a password reset link has been sent." This is a standard auth-system pattern and the reason your inbox stays empty when you fat-finger an address by one character.

Checklist for the missing email

  1. Spam / Junk folder. First place to check. Transactional emails from no-reply@ addresses routinely land there.
  2. Promotions or Updates tab on Gmail. The reset email is transactional, but Gmail occasionally misroutes it.
  3. Exact address. Double-check the address you typed. The system reveals nothing on a typo — it just doesn't send.
  4. Corporate mail gateways. Microsoft 365 and Google Workspace sometimes quarantine transactional emails for several minutes.
  5. Continue with Google account. Accounts created via Google OAuth don't have a password to reset. Sign back in with Continue with Google instead.

When the email does arrive, the link inside is a token_hash parameter pointing at /auth/reset-password. The token is single-use and time-limited (one hour is the documented expiry). If you click it and the page says expired or already used, go back to the login page and request a fresh one — the new link invalidates any earlier ones.

Still nothing after 10 minutes

Email support@validemailchecker.com from the address you signed up with. We can confirm whether the account exists and trigger a manual reset (with identity verification) if needed. If you don't have access to that original address anymore, you'll need to follow the account-email change process — the email on a VEC account is locked, so the only path forward is delete and resign-up with the new address.

Whitelist the sender
Add the VEC sending domain to your safe-senders list (in Gmail, click the three dots on a previous VEC email and "Add to contacts"; in Outlook, right-click and "Add to safe senders"). Future transactional emails arrive without spam-folder detours.