Invalid reset link
The reset-password page loaded with an empty token (missing query param). UI shows Invalid reset link. and a button to request a new link.
Why this happens
User opened /reset-password without ?token=…, truncated the email URL, or a mail client stripped the query string. Distinct from submitting an expired token (that path uses Could not update password / API errors after submit).
Diagnose and fix
1. Use Request new link / forgot-password; open the latest email link in the same browser.
2. Copy the full URL if the mail client breaks links.
3. Fix outbound mail if reset emails never arrive (Emails are not arriving — checklist).
4. After a valid token loads, set a new password that meets length rules.