WordPress Password Reset Email Contains Wrong Domain After Migration — Password reset links point to an old domain after moving a website. This guide focuses on separating the immediate failure from the underlying cause, with checks selected for the affected product instead of generic resets.
Recognize the failure and narrow its scope
Check WordPress home/siteurl and outgoing mail template values. Start with the smallest reproducible example: one device, one file, one account or one transaction where possible. If the problem occurs only in a particular environment, that boundary guides the repair more reliably than the wording alone.
Inspect reverse proxy Host headers and configured public domain. Save the result, version number and time of the failure so a later test can be compared against the same conditions. A successful test in a different environment does not prove the original environment is fixed.
Before changing the system
Risk to avoid: Old domain may still be receiving sensitive account tokens. Preserve a working database/files backup and record active plugin versions before changing a live site. Use staging for disruptive tests.
The guided methods begin with observation and reversible changes. Use the advanced checks only when the earlier test points to the corresponding subsystem or when you have administrative authorization.
Step-by-Step Troubleshooting
Use Beginner checks before Advanced methods. Record one change at a time, preserve evidence and use the device or software vendor documentation.
Confirm the failure and its boundaries
Password reset links point to an old domain after moving a website. Check WordPress home/siteurl and outgoing mail template values. Capture the affected model or software version, exact message and time. Compare only one factor at a time so a successful test has a clear explanation.
Collect the discriminating evidence
Inspect reverse proxy Host headers and configured public domain. Write down the finding and compare it with a known-good device, account, application or connection where that comparison is safe. A different result points to the layer worth investigating.
Apply the least disruptive corrective action
Correct site URLs through WordPress settings or WP-CLI as appropriate. Re-test immediately before taking another action. If the result does not change, return the modified setting to its original value whenever practical.
Run the same success test again
New password reset message links to expected HTTPS domain. Test the exact action that failed rather than a loosely related function. If this is intermittent, repeat under the original load or connectivity conditions.
Trace the specific failing subsystem
Inspect reverse proxy Host headers and configured public domain. Check relevant application, device, service or server logs only for this failure window. Compare timestamps and avoid treating unrelated warnings as the root cause.
Investigate the supported advanced repair
Investigate plugins overriding network emails or password reset URLs. Perform this only after the first two checks support that hypothesis. Use official documentation for the installed release and record previous values before editing configuration.
Preserve the rollback and security boundary
Old domain may still be receiving sensitive account tokens. Document what changed, who authorized it and how to reverse it. If backups or account ownership cannot be verified, stop before destructive work.
Confirm recovery with a repeatable test
New password reset message links to expected HTTPS domain. Repeat after reconnecting, restarting the relevant service, or beginning a new session when that is part of the original failure. Record the new logs and compare them with the baseline.
Interpret the test results
| What you observe | Likely direction | What to do next |
|---|---|---|
| The issue changes under the comparison test. | Check WordPress home/siteurl and outgoing mail template values. | Document which factor changed and retest the same operation. |
| The symptom persists and diagnostics show a specific fault. | Inspect reverse proxy Host headers and configured public domain. | Investigate plugins overriding network emails or password reset URLs. |
| A safe correction seems to resolve the issue. | Correct site URLs through WordPress settings or WP-CLI as appropriate. | New password reset message links to expected HTTPS domain. |
Use the table as a decision path, not a list of actions to perform all at once. If password reset links point to an old domain after moving a website, preserve the exact error and scope. If the comparison changes the outcome, investigate the differing configuration before touching unrelated components.
How to verify the repair worked
New password reset message links to expected HTTPS domain. Repeat the same operation that originally failed, not merely a related smoke test. Where possible, perform a second run after reopening the application, reconnecting the device, or restarting the relevant service. Check that the successful result persists and that no new warning or data inconsistency has appeared.
A single successful attempt is encouraging but insufficient for intermittent faults. Keep the comparison result and exact steps so the change can be reversed if another subsystem is affected.
Solution Checklist
When to stop and escalate
If the problem remains after the low-risk steps, the next supported diagnostic route is: Investigate plugins overriding network emails or password reset URLs. Stop if the procedure would affect sensitive credentials, erase data, change production permissions or require unsupported firmware actions. Provide a technician or administrator with the original symptom, comparison findings, relevant logs and changes already attempted.
Common questions
Should I reset the device or reinstall everything?
Not as an initial step. The first meaningful discriminator here is: Check WordPress home/siteurl and outgoing mail template values. A broad reset can remove settings or local data while leaving a network, account, hardware or service-side problem untouched.
How do I know the problem has not simply disappeared temporarily?
New password reset message links to expected HTTPS domain. Re-test under the same conditions that caused the failure. If it returns, collect the new diagnostic evidence before making another change.
Further reading
For supported options and version-specific menu paths, consult WordPress Developer Resources. The linked portal is general vendor documentation, not necessarily a page confirming this exact error code. Match instructions to the affected model and software version.