I don't understand the threat model here. The link needs almost the same kind of protection as the original password. The only difference is, that the link expires.
So how do you transmit those links securely and why didn't you use that for your passwords in the first place?
So how do you transmit those links securely and why didn't you use that for your passwords in the first place?