What this means
What this means
PocketBase sends password-reset (and verification) emails through an SMTP server, and it needs to know your app's public URL so the reset link points at the right place. A fresh install has SMTP disabled and its App URL set to localhost, so no mail is ever sent. Enabling password-reset email configures both: a working SMTP sender and your real App URL — so 'forgot password' starts working for your users.
Before you start
Before you start
Open your PocketBase service in the portal (Services → your app) and use the 'Password-reset email' card. If your app's domain has email hosted with CM Cloud, no details are needed — we provision a mailer mailbox and send from a noreply@ address on your domain. If your email is hosted elsewhere, have your SMTP host, port, username, password, and a From address ready (for example a Gmail app password, or your provider's SMTP).
Step-by-step guidance
Step-by-step guidance
- Go to Services and open your PocketBase app.
- Find the 'Password-reset email' card and click 'Enable password-reset email'.
- If your domain's email is hosted with CM Cloud, you are done — a confirmation appears and your users can reset their passwords by email.
- If your email is hosted elsewhere, a short form appears: enter your SMTP host, port, username, password and From address, then click Save & enable.
- Test it: open your PocketBase login, choose 'forgot password', and confirm the email arrives.
What CM Cloud support will review
What CM Cloud support will review
Support can confirm the setting was applied and that a test email is delivered. If a message does not arrive, we check that the From address is allowed to send and that the SMTP credentials are valid.
What is not automated yet
What is not automated yet
This configures email sending only. It does not create your PocketBase collections, users, or API rules, and it does not change any passwords. Existing users keep their current passwords — the feature simply lets them request a reset link by email.
Safety note
Safety note
Reading this article changes nothing. Enabling password-reset email only updates your PocketBase mail settings and, for CM Cloud-hosted domains, creates a small system mailbox used to send the reset messages.
Safe next action
Safe next action
Open your PocketBase service page and click 'Enable password-reset email'. If your email is hosted elsewhere, enter your SMTP details when prompted.