I encountered this issue, where I found all of my reset tokens were being rejected. Thank you, @jiteshdhamaniya, for figuring out why. Changing the “email” value to the user’s username fixed the problem and allowed me to reset the password. Hopefully this can be resolved easily in the plugin, as I am working in an environment with multiple applications syncing passwords, where the central application won’t necessarily know the user’s wordpress username, only their email.