diff --git a/web/e2e/password-reset.spec.ts b/web/e2e/password-reset.spec.ts
index f0c38970..dc86a854 100644
--- a/web/e2e/password-reset.spec.ts
+++ b/web/e2e/password-reset.spec.ts
@@ -2,25 +2,44 @@ import { expect, test } from '@playwright/test'
 import { setEnglishLocale } from './helpers/auth-fixtures'
 
 test.describe('Password Reset (Real API)', () => {
+  function uniqueResetEmail(seed: string) {
+    return `nonexistent_${seed}_${Date.now()}@example.com`
+  }
+
+  function forwardedIp(seed: string) {
+    const hash = Array.from(seed).reduce((value, char) => value + char.charCodeAt(0), 0)
+    return `198.51.${(hash % 200) + 1}.${(Date.now() % 200) + 1}`
+  }
+
   test.beforeEach(async ({ page }) => {
     await setEnglishLocale(page)
   })
 
   test('sends verification code from reset-password page', async ({ page }) => {
+    const email = uniqueResetEmail('request')
+    await page.context().setExtraHTTPHeaders({
+      'X-Forwarded-For': forwardedIp('request'),
+    })
+
     await page.goto('/reset-password')
 
     await expect(page.getByRole('heading', { name: 'Reset Password' })).toBeVisible()
-    await page.getByLabel('Email').fill('nonexistent_user@example.com')
+    await page.getByLabel('Email').fill(email)
     await page.getByRole('button', { name: 'Send Verification Code' }).click()
 
     await expect(page.getByText('If the account is eligible, a verification code has been sent.')).toBeVisible()
   })
 
   test('shows backend validation error for an invalid reset code', async ({ page }) => {
+    const email = uniqueResetEmail('invalid-code')
+    await page.context().setExtraHTTPHeaders({
+      'X-Forwarded-For': forwardedIp('invalid-code'),
+    })
+
     await page.goto('/reset-password')
 
     await expect(page.getByRole('heading', { name: 'Reset Password' })).toBeVisible()
-    await page.getByLabel('Email').fill('nonexistent_user@example.com')
+    await page.getByLabel('Email').fill(email)
     await page.getByRole('button', { name: 'Send Verification Code' }).click()
     await expect(page.getByText('If the account is eligible, a verification code has been sent.')).toBeVisible()
     await page.getByLabel('Verification Code').fill('123456')