The Mozilla secure coding guidelines recommend expiring them after 8 hours:
https://wiki.mozilla.org/WebAppSec/Secure_Coding_Guidelines#Email_Change_and_Verification_Functions
The Mozilla secure coding guidelines recommend expiring them after 8 hours:
https:/ /wiki.mozilla. org/WebAppSec/ Secure_ Coding_ Guidelines# Email_Change_ and_Verificatio n_Functions