Please help us help you and fill where relevant:
Your LimeSurvey version: LimeSurvey Community Edition
Version 5.6.33+230808
Own server or LimeSurvey hosting: Own server
Survey theme/template:
==================
Is it possible to set the validity time of the password change link that is sent to the user's email when an account is created?
For how long is the link to change the password in the lime survey valid?

Currently there is no way to adjust this limit. After 48h the link to set a password expires. This is set at the "lime_users" table at column "validation_key_expiration".

It's really bad that there is no way to configure this limit. We received reports from several customers complaining that users missed to set the password in time.
One solution could be to code a plugin which comes with a new setting for the limit so you could raise the limit there.
Plugin event: www.limesurvey.org/manual/CreateNewUser

Mazi wrote:

It's really bad that there is no way to configure this limit. We received reports from several customers complaining that users missed to set the password in time.

48h is quite some time. I find it rather "really bad" if people request a new password and then miss to set the password despite having 48h to do so. Let's be honest, after 48h, how many still remember that they requested the password? I mean, yes, it would be great to be able to configure this individually, but I doubt that adding more days will really solve the problem. If they didn't do it in 48h, chances are low they will do it in 96h...

What is the solution here? They just ask for another link and then have 48h again...

Hey holch,
I get your point, but I was actually not talking about an existing user using the "Forgot PW" feature. For them this is fine and they can always start a new request.
My concern is related to the initial email sent to a newly created admin user. Sometimes superadmins create a bunch of new admin accounts. But some people may miss the email, they are on vacation or simply busy with other stuff. Their link to set their initial PW also expires and then a super-admin needs to manually create a new PW or re-create the user account.
For these cases the limit of 48h may not be sufficient and it would be helpful if it would be possible to adjust the limit as needed.

OK, but I don't think the situation is that much different.

Let's be honest, if the email is older than 48h and nothing has happened, this email is basically non existent anymore. They might as well just send a new email with a new link.

Probably more helpful to have a feature that resends the invitation email after the initial 48h than to extend the 48h window. Just saying...