@dansup once per 24h would definitely fail for me for reasons relating to the way embedded browsers in email clients frequently lose state and password managers are not 100% reliable.

I almost always end up requesting 2-3 resets in a row.