Invitation, verification or password-reset link cannot be used
A link from an email opens a page that says it is incomplete, invalid, expired or already used: how long each kind of link lives, what makes it stop working and how to get a new one.
Messages this explains
- “This invitation has expired. Ask your administrator to send a new one.”
- “This invitation cannot be used”
- “This link is invalid, has expired, or was already used.”
- “This invitation has already been accepted.”
- “This invitation link is incomplete”
- “Open the link from your invitation email.”
- “This invitation was already accepted.”
- “This verification link is incomplete”
- “This verification link is invalid”
- “Verification links expire after 24 hours.”
- “Please verify your email address <email> by <date>; after that you cannot sign in until you do. Check your inbox for the verification link.”
- “A new verification email has been sent.”
- “Email could not be sent right now.”
- “Email could not be sent right now; try again later.”
- “Verification email sent.”
- “This reset link is invalid”
- “Reset links expire after one hour and can only be used once.”
- “This link is invalid, has expired or was already used.”
- “If an account exists for that email, a password reset link is on its way. The link is valid for one hour.”
Invitation, verification or password-reset link cannot be used
What you see
- "This invitation link is incomplete" with "Open the link from your invitation email." (the address you opened has no invitation code in it).
- "This invitation cannot be used" with one of:
- "This invitation has expired. Ask your administrator to send a new one."
- "This invitation has already been accepted."
- "This link is invalid, has expired, or was already used."
On Users, when an administrator presses Resend invitation or Revoke invitation on a row whose user accepted the invitation after the list was loaded: "This invitation was already accepted." (Once the list is refreshed, the row shows Deactivate instead of the invitation buttons.)
On Verify email: "This verification link is incomplete" or "This verification link is invalid", always followed by "Verification links expire after 24 hours." While you are signed in, the page offers Resend verification email and then says "A new verification email has been sent." or "Email could not be sent right now."
At the top of every page while your email is unverified (the app shell): "Please verify your email address <email> by <date>; after that you cannot sign in until you do. Check your inbox for the verification link." with Resend email and Dismiss. After Resend email the banner says "A new verification email has been sent." or "Email could not be sent right now; try again later." On My Profile, the Account card's Resend verification email button answers "Verification email sent." or "Email could not be sent right now."
On Reset password: "This reset link is invalid" with "Reset links expire after one hour and can only be used once." when the address has no code; or, after you submit the form, the banner "This link is invalid, has expired or was already used." with a Request a new reset link link.
On Forgot password, after you submit: "If an account exists for that email, a password reset link is on its way. The link is valid for one hour."
Why it happens
Every emailed link carries a signed code that is checked when you open it. Each kind has its own life and its own reason to stop working:
- Invitation links are valid for the number of hours set in Invitation links expire after (hours) on Organization settings (72 hours unless changed; 1 to 720). An invitation can be accepted once: after the user has chosen a password the link only says it was already accepted, and the user signs in normally. Pressing Resend invitation issues a fresh link and every earlier link for that user stops working ("This link is invalid, has expired, or was already used."). The same message appears when the invited user or the organization has been deactivated in the meantime.
- Verification links expire after 24 hours and stop working if the email address on the account changes. Until the address is verified the banner stays on every page (you can dismiss it for the current browser session). Accepting an invitation counts as verification, because the link reached that mailbox.
- Reset links expire after one hour and die the moment the password changes, so a link can reset the password only once. After a reset you are signed out everywhere. The forgot-password page gives the same answer whether or not the email has an account, so that it cannot be used to discover who has one.
- "Email could not be sent right now." means the app could not hand the message to the mail server. Nothing is wrong with your account; the link simply did not go out.
How to fix it
- Invitation expired or replaced. Ask an administrator to open Users (the row shows the status Invitation expired) and press Resend invitation (the Edit permission on Users). Open the newest email: older links no longer work. Administrators who need invitations to live longer change Invitation links expire after (hours) on Organization settings (the Edit permission on Organization Settings).
- Invitation already accepted. The account exists: go to Sign in and use your password, or Forgot password if you do not remember it. An administrator who no longer wants the user presses Deactivate instead of revoking the invitation.
- Verification link invalid. Sign in, then press Resend email on the banner or Resend verification email on My Profile, and open the new link within 24 hours. If the link is "incomplete", copy the whole address from the email; a truncated link has lost its code.
- Reset link invalid or used. Press Request a new reset link, enter your email on Forgot password and open the new link within one hour. If you already reset the password with this link, simply sign in with the new password.
- Email could not be sent. Try again in a few minutes. If it keeps failing, tell your administrator: the organization's outgoing mail is not reaching the mail server, which also affects invitations and workflow emails.
Related
Related
- Join <organization> (Accept invitation)Screen
The page the invitation email opens: choose your password and join the organization that invited you, with the role the administrator gave you.
- Verify emailScreen
The page the verification link in your email opens: it confirms your email address, or lets you ask for a new link when the old one has expired.
- Choose a new passwordScreen
The page the password reset email opens: choose a new password, which signs you out everywhere so you can sign in again with it.
- Forgot your password?Screen
Ask for a password reset link by email when you can't remember your password.
- UsersScreen
The people in your organization: invite new users, change their role, deactivate or reactivate them, reset a lost two-factor authentication, and resend or revoke pending invitations.
- Sidebar, top bar and notifications bellScreen
The frame around every page once you are signed in: the sidebar with its groups, the top bar with the notifications bell, the light and dark switch and your account menu, and the banners that ask you to act.
- My ProfileScreen
Your own account: see your email, organization and roles, change your name and phone, change your password, turn two-factor authentication on or off, and sign out everywhere.
- OrganizationScreen
Your organization's profile and policies: name and invitation expiry, the two-factor requirement, the AI connectors switch, the help-assistant recording switch, the project defaults every project inherits (RERA gate, estimate validity, the two chargeable areas, carpet area offered, revenue method and trigger) and the effective-dated rules: the RERA escrow share that splits every sweep of a project's collection account, TDS on sales and booking cancellation.
- Cannot sign in: wrong password, pending invitation, deactivated account or a rejected codeTroubleshooting
The sign-in form, the two-factor step or a password form refuses you: what each message means, the rule behind it and how to get back in.