voodish logo
tweet rss book of faces Linked In

Joomla! Your password reset confirmation failed because the token was invalid


If you are receiving the error: “your password reset confirmation failed because the token was invalid” from Joomla 1.5.16 or higher then this can usually been down to a couple of factors.

The most common factor is the template over ride ‘confirm.php’ not displaying the correct fields.

Solution 1 - Template Over-ride

Navigate to: templates/YOUR_TEMPLATE_NAME/html/com_user/reset/
and temporarily rename: confirm.php to confirm.php-BAK

*If you do not have a confirm.php file then try Solution 2, below.

With that renamed, try the Password confirmation token again; if that works great :)
IF you require the template features from the over-ride file then you may want to include the necessary fields from the master file; you can read more about that process here

If this doesn’t solve your problem, then you may also need to carry out Solution 2:

Solution 2 - Modify reset.php

Navigate to: /components/com_user/models/reset.php

At line 126
where there is a replication of $row = $db->loadObject(); so the if check
returns false.

These are the line from 126 to 133:

$row = $db->loadObject();

// Verify the token
if (!($row = $db->loadObject()))
return false;

The solution is to remove the first$row = $db->loadObject();

Now try the Password confirmation token again; if that works great :) if not, continue reading.

Still not working?

If your Joomla install is still returning the token invalid error, then please leave a message below.

Related Articles

Comments RSS Feed


  1. Pieter March 9, 2011

    Works like a charm! Thanks!

  2. Go to Top of the page

  3. muthu March 19, 2011

    still i am getting the same error “Your password reset confirmation failed because the token was invalid..”. Please give me any idea to solve this issuse

  4. Go to Top of the page

  5. anu April 21, 2011

    solved my problem
    thank u so much…

  6. Go to Top of the page

  7. Robert April 25, 2011


    I tried solution nr 2 but did not work. Its a non-profit organisation site so any help are apriciated.


  8. Go to Top of the page

  9. admin April 25, 2011

    Did you try Step 1 and rename the confirm.php - if that didn’t work send me a mail with your site access details and I will take a look for you, cheers.

  10. Go to Top of the page

  11. GuitarWorker May 3, 2011

    Wow, worked great!!! THANKS

  12. Go to Top of the page

  13. Farooq Pathan May 17, 2011

    using ja social templete and tried the solution 2 as solution 1 was not feasible, but the issues is same invalid token, please some other options thanks

  14. Go to Top of the page

  15. admin May 17, 2011

    Joomlart do like to have lots of over-ride directories dotted about the place.

    Does option 1 work for you? If so, then your on the right track and need to find where JA have placed your reset.php

    It might be worth giving JA a quick mail or forum post…

  16. Go to Top of the page

  17. Michal May 23, 2011

    Hi, it did not work for me unfortunately. I use Joomla 1.5.23 and Jomsocial 1.5.248.

  18. Go to Top of the page

  19. Tom May 26, 2011


  20. Go to Top of the page

  21. Tim June 4, 2011

    #1 worked for me. THANK YOU!

  22. Go to Top of the page

  23. Norm Douglas June 14, 2011

    I’ve tried both options… including disabling any HTML overrides… nothing working.
    Any suggestions?

  24. Go to Top of the page

  25. esalvino June 17, 2011

    None of these worked for me. I’m using joomla 1.5 with virtuemart 1.1 and I’m unable to resolve the invalid token issue. I tried disabling joomfish as it was an issue before, tried to look into my template but there is no override (no com_user directory). Any more ideas will be greatly appreciated. Thank you.

  26. Go to Top of the page

  27. admin June 21, 2011

    There does seem to be some hit and miss with this fix.

    Those that are still having problems look like they have other contribs/plugins/mods and/or bespoke templates installed.

    I would try:

    1. Using a default Joomla template
    2. Clear all caches
    3. TEST with an without the fixes above

    Still not not fixed? Try:

    4. Disable all plugins / modules / contribs
    5. Clear all caches
    6. TEST

    If that works then reintroduce each mod/contrib/plugin and TEST after each; which will highlight the problem add-on.

    Still not not fixed? Try:

    7. If that doesn’t work, then try a fresh Joomla install and test; it maybe down to the server settings.

    Hopefully that will sort this out for the majority of you - it is an annoying problem; feedback is greatly appreciated so that we can help others finally put this to bed.

  28. Go to Top of the page

  29. Andrew H June 22, 2011

    Thanks! This was very helpful info. Disabling the template override in use worked for me.

  30. Go to Top of the page

  31. admin July 5, 2011

    Thanks for the update Andrew.

  32. Go to Top of the page

  33. DP July 23, 2011

    THis is what worked for me:

    I’m using Joomla 1.5.23, and I am not using any overrides for the com_user component.

    Part of the solution is mentioned here: http://docs.joomla.org/Confirm_password_in_1.5.16

    The article says to add the code below to confirm.php at templates/current-template-name/html/com_user/reset/confirm.php:


    Like I said I’m not using any overrides, so I don’t have the com_user folder at the location help article mentions.

    But what I do have is a confirm.php at this location: /components/com_user/views/reset/tmpl

    So I added the code here and voila problem solved!

    Good luck everyone!

  34. Go to Top of the page

  35. admin July 23, 2011

    Thanks DP, hopefully that will be useful for those not getting anywhere with the original fix.

  36. Go to Top of the page

  37. brett July 28, 2011

    Hi, Thanks for the list of possible solutions. I have tried your methods and also the one mentioned by DP but mine is still not working. I’m wondering if you have any other ideas. Thanks again for taking the time to put them up.

  38. Go to Top of the page

  39. Nick Poole August 10, 2011

    Hi there, thanks so much for posting this. Your solution has partly worked, in the sense that the user can get the token and reset their password. However, when they enter their token and click ’submit’ the next screen shows the error ‘Password reset failed due to invalid token’ 3 times.

    It then lets you enter a new password, accepts it and redirects you to a login screen.

    Do you have any idea why this should essentially have worked, but the site is still displaying the invalid token error?

    With thanks!


  40. Go to Top of the page

  41. Dave August 16, 2011

    Thanks DP,
    That was the only working solution for me ;-)
    Thanks a lot!

  42. Go to Top of the page

  43. juan ortega August 16, 2011

    “Navigate to: templates/YOUR_TEMPLATE_NAME/html/com_user/reset/
    and temporarily rename: confirm.php to confirm.php-BAK” before I have wrong rename file. I rename confirm.php on component XD lol… thx voodish

  44. Go to Top of the page

  45. Nick Poole August 29, 2011

    Hi there, great tips, but unfortunately, I have followed steps 1 & 2 and I am still getting the Token Reset error. I’ve looked everywhere, but I can find a solution. ANY help/ideas you could offer would be fantastic - we’re at http://www.collectionslink.org.uk

  46. Go to Top of the page

  47. Mig September 5, 2011

    Method 1 solved my problem in Joomla 1.5.23. I am using a template based in Beez, and the username field was missing in confirm.php. Thank you!

  48. Go to Top of the page

  49. Pierre September 9, 2011

    Solution #2 worked for me. Joomla 1.5.23.
    Template: JP_architecture, without overrides.
    Thank you for your help!

  50. Go to Top of the page

  51. Michele September 14, 2011

    I was lookig for this “problem” too as one of my customers have it on his website. After look everywhere as he not have template override, he not have the replication of loadobject as in step 2, tryed the change of confirm.php in component too as told in one of the message still was not working …

    After all I had find what was “the problem”, the users of my customer was putting the wrong username in the second step where you put the code received by mail as they think their username was their mail (but it’s not always so) and this not give an error message like “wrong username” but the “invalid token” wich is not understandable.

    I’m looking how I can change this or have in the mail with the code sent to the customer the username too as near always the users lost their password but not remeber the username too (if not the same of their email address)

    Hope this could help other people too :)

  52. Go to Top of the page

  53. Bram September 16, 2011

    Option two did the trick for me, but after changing the password i get the following error:
    “Username and password do not match or you do not have an account yet.”
    But the password DID change.. Any idea what this is and how it can be solved?

  54. Go to Top of the page

  55. Sue October 7, 2011

    It works as a charm.

    Thank you

  56. Go to Top of the page

  57. Jason November 9, 2011

    None of these fixes work for me. I am using Joomla! 1.5.23 Stable. I am also using the RHUK Milkyway template. I do not have the com_user. Not using template override. Any ideas what I can do? I tried step 2 but nothing. A few of my members are having this issue. I tested it and it doesn’t work for me either. Need help!

  58. Go to Top of the page

  59. Jason November 18, 2011

    Anyone have a fix for this? Nobody has contacted me at all as of yet.

  60. Go to Top of the page

  61. Summer Taylor December 11, 2011

    Hello, I do not have either one of the scenarios above. I’ve tried using the suggestion of DP above and I’m not sure how to test this to make sure it works or if I’ve implemented the code in the right place. Can someone please advise? My client is rather annoyed with all the emails he’s receiving saying they need to submit a token. They’re getting about 12 a day. Ideas please? Thank you!

  62. Go to Top of the page

  63. chuck March 23, 2012

    Thank you for making what you know available! Solution 1 worked for me.

    Joomla 1.5.21

  64. Go to Top of the page

  65. Thanks! This helped me out a lot and also solved the problem with a component not emailing out passwords as well!

  66. Go to Top of the page

  67. Kent May 26, 2012

    #1 worked for me. Thanks!

  68. Go to Top of the page

  69. Azurelink June 6, 2012

    You’ll also get the same error message if the username is wrong or mistyped. So make sure you’re using correct info in your tests. I added the following to my language file: “Please recheck your username and token for accuracy and re-submit.”

  70. Go to Top of the page

  71. Seth June 6, 2012

    I, too tried all the suggestions found here with code changes to the template overrides and whatnot.

    For those unfamiliar, the system will use component overrides when they are found inside your template/html/com_whatever in this case yourtemplate/html/com_user

    I went into the system original components/com_user/views/reset and copied the files to mytemplate/html/com_user/reset

    and also copied over components/com_user/models/reset.php to mytemplate/html/com_user/models

    This has fixed the problem for me, now off to style them all again! yargh.

  72. Go to Top of the page

  73. Dean Morris September 8, 2012

    II am having problems with the login and password reset for my site. When i try to login as either administrator or user I get a “invalid token’ error message. Also, when I try to reset a passowrd, i get “Your password reset confirmation failed because the token was invalid”. With regard to latter, I tried to edit the com_user file (as you suggest) but it didn’t fix. Appreciate your help/advice! Regards, Dean

  74. Go to Top of the page

  75. Ken Kmet October 6, 2012

    I tried solutions 1 and 2 above and had no success. Still receiving the message: Your password reset confirmation failed because the token was invalid. Wondering if you can help? Thanks.

  76. Go to Top of the page

  77. anialew November 27, 2012

    I have a big problem with joomla 1.5.26.
    I can log in, make an article, but when I want to publish it (by clicking red circle with white cross on it to show the article on the main site) I get the message “invalid token”. What is wrong and how can I overcome it? I’ve tried updating but it didn’t help.
    Please, help me.

  78. Go to Top of the page

Leave a comment