I'm getting errors when we use the reset password functionality with a page in our content tree with the reset password webpart on it. I request a password reset email/link and when the click on the link to reset their password I receive errors like below in the event log. I can also request the email/link and click the link 100 times without an issue.

Any idea what would cause the issue aside from someone requesting the email several times (and previous expire) or the link is simply expired because its been too long or because they have clicked the "Cancel" link?

Errors vary from:

Message: Request identifier hasn't been found.

Message: Hash validation failed.

I can request the password right now, receive the email a minute later and click on the link after I open my email and I receive an invalid request message. How can the request be invalid in less than a minute or two? I've even set the requests to be valid for 12 hours and still receive this error.