From bfdcd903efcb9c3457be3f53a2a94294330194f5 Mon Sep 17 00:00:00 2001
From: Philipp Daun <post@philippdaun.net>
Date: Wed, 29 Jul 2026 12:42:13 +0200
Subject: [PATCH] Fall back to default site in password scheme

---
 src/Auth/Protect/Protectors/Password/Controller.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/Auth/Protect/Protectors/Password/Controller.php b/src/Auth/Protect/Protectors/Password/Controller.php
index 3e0a890f186..c92ad9efcf6 100644
--- a/src/Auth/Protect/Protectors/Password/Controller.php
+++ b/src/Auth/Protect/Protectors/Password/Controller.php
@@ -19,7 +19,7 @@ class Controller extends BaseController
     public function show()
     {
         if ($this->tokenData = session('statamic:protect:password.tokens.'.request('token'))) {
-            $site = Site::findByUrl($this->getUrl());
+            $site = Site::findByUrl($this->getUrl()) ?? Site::default();
             $data = Data::find($this->tokenData['reference']);
 
             app()->setLocale($site->lang());