Maybe „Link do resetowania hasła”? Besides that, if link is either invalid or expired, then trying again seems to be pointless (this applies also to the English translation).

Yup, it should be something like “Try to get another one” or tip like “Have you already used it?”

What about the small issue with missing “do”? Actually, since the real issue is not with the link (an URL may be even copy-pasted from an email without a link), but with a token, I would make it „Token resetowania hasła jest nieważny lub nieprawidłowy” — if we’re not obligated to translate from English…