Minimize reset password request success window duration [Updated in Securty Center 1.3]
The password_reset.request.success_window property controls the number of minutes a user must wait to reset or change their password again after successfully resetting the password. The user will be blocked to reset the password again for the specified duration.
More information
| Attribute | Description |
|---|---|
| Property name | password_reset.request.success_window |
| Configuration type | System Properties (/sys_properties_list.do) |
| Category | Authentication |
| Purpose | It denotes the time period in minutes that a user must wait after successfully resetting the password to reset the password again. |
| Recommended value | 1440 |
| Default value | 1440 |
| Configuration type | Positive integer values |
| Security risk | (High) If the property is not set to the recommended value of 1440 or less,then it increases the opportunity of someone else abusing the password reset functionality to gain unauthorized access to a user account. |
| Security risk rating | 4.9 |
| References | Configure Password Reset properties |
To learn more about adding or creating a system property, see Add a system property.