When I try to set my password, or after a password reset I get
“This password reset token is invalid” or “This password reset token has expired”
When you request a new password, a secret token is generated. This token prevents other people to use your link. Due to safety, this token is only valid for 12 hours.
That means that if you try to use the link after 12 hours, you will see this message.
When you create an account, we generate the token for you. That is why you can get the message as well, when you did not request a password reset, but you have never set your password before. If you see this message, there is nothing wrong. Just request a new token. Make sure to use the last one, because only that one is valid.