Do I need to encrypt the password reset token using email?

Question

Information Security

Do I need to encrypt the password reset token that is sent with the email to the user?
If yes, then why?

Answer 1

Build a model of the intruder. Without details about your system, I'll say no. If the employee's mailbox can be accessed from the open internet, then maybe.

Answer 2

There is no need for this, it is enough to make the token one-time, long enough and with a short lifetime.