Maximize reset password SMS pause window duration
Manage the time duration in minutes that a user must wait before they can request a new password reset code.
If the password_reset.sms.pause_window system property is not set to the recommended value of 2 minutes or greater, then a malicious user could initiate many password reset SMS codes in a brief window of time.
Ensure that the property password_reset.sms.pause_window is set to 2 or greater.
More information
| Attribute | Description |
|---|---|
| Configuration name | password_reset.sms.pause_window |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | Integer |
| Recommended value | 2 |
| Default value | 2 |
| Category | Authentication |
| Security risk |
|
| Dependencies and prerequisites | None |