flask-security/flask_security/templates/security/email/change_notice.html

<p>Your password has been changed.</p>
{% if security.recoverable %}
<p>If you did not change your password, <a href="{{ url_for_security('forgot_password', _external=True) }}">click here to reset your password</a>.</p>
{% endif %}