Supabase confirmation or password reset email not arriving

What it means in plain English

The email either wasn't sent (limits), went to spam, or was sent with a broken link.

Likely causes

• Built-in mailer limit reached (2 per hour).
• Default sender isn't meant for production, so deliverability is poor.
• The link points to localhost because the Site URL wasn't updated.

How to fix it, step by step

1. Supabase → Logs, then set Log Type to Auth, to see whether the email was attempted or rate-limited.
2. Set up custom SMTP (Authentication → Emails → SMTP Settings) with a verified domain.
3. Update Site URL and Redirect URLs in Authentication → URL Configuration to your live domain.
4. Ask users to check spam while you fix deliverability.

How to check it worked

• Trigger a reset to a test inbox; it arrives and the link opens your live domain.

Sources

• https://supabase.com/docs/guides/auth/auth-smtp (opens in a new tab)
• https://supabase.com/docs/guides/auth/rate-limits (opens in a new tab)
• https://supabase.com/docs/guides/observability/logs (opens in a new tab)
• https://supabase.com/docs/guides/auth/redirect-urls (opens in a new tab)