After you send users a password recovery link to their emails or phones, your job isn't done. The email or text should contain clear and straightforward instructions on what to do next.

Avoid including too much text — a prominent link to the reset page or a code that allows users to reset their password should be included.