Read time: 1 - 2 mins

In this piece, I improve error messages in a password reset flow by replacing vague or hostile copy with clear, supportive alternatives. The goal of each revision is to reduce user frustration, clearly explain what went wrong, and guide the user toward the next step.

User scenario

A returning user forgets their password and attempts to reset it using their email address. Errors occur due to invalid input, expired links, or system constraints.

Error 1: Email Address not Found

Poor microcopy

• User does not exist

Improved microcopy

• We can’t find an account with that email address
• Check for typos or try a different email

Why this works: Explains the issue properly and offers the user a clear next step.

Error 2: Password Does Not Meet Requirements

Poor microcopy

• Password invalid

Improved microcopy

• Your password needs at least 8 characters, including one number.

Why this works: Provides actual insight to the user on how to avoid the error.

Error 3: Passwords Do Not Match

Poor microcopy

• Password confirmation error

Improved microcopy

• The passwords don’t match. Try entering them again.

Why this works: Tells the user what has happened in clear language and offers them a clear next step.

Error 4: Reset Link Expired

Poor microcopy

• Invalid link. This action cannot be completed.

Improved microcopy

• This reset link has expired. Request a new link to continue.

Why this works: Tells the user what has happened in clear language and tells them what to do next.

Error 5: Too Many Attempts

Poor microcopy

• Rate limit exceeded

Improved microcopy

• Too many attempts. Please wait a few minutes before trying again.

Why this works: Uses plain accessible language to explain the issue and tells them how to navigate it.