Forgotten passwords – should the temporary password expire?

Just designing the forgotten password form for a retailer.

When researching other retailers, I've have noticed the temporary password link that gets sent to inbox's expire after a few hours. What is this reason for this?

I'm wondering whether we need to do this or not?