Option configure whether or not to send email in urls post change password success is not yet part of the product. May I ask what is your concern with the emails being part of urls? Are they being logged into google/other analytics platforms? Maybe you can exclude the analytics from that page to avoid for now. You can always raise it with Auth0 product team via our feedback page Auth0: Secure access for everyone. But not just anyone.