I noticed that recently app key is encoded in base 64. When generating password reset token it does not check whether key is base64 encoded or not. https://github.com/laravel/framework/blob/7cb2472621bd120185ff8b6ac62b3bc06ed63d63/src/Illuminate/Auth/Passwords/PasswordBrokerManager.php#L88