Minimize reset password max SMS per day

  • Release version: Australia
  • Updated March 12, 2026
  • 1 minute to read

    • Manage the maximum number of SMS codes sent for verification per day by user.

    The password_reset.sms.max_per_day system property determines the maximum number of SMS codes sent for verification per day for a user.

    Set the property password_reset.sms.max_per_day to a value of or less.

    More information

    Attribute Description
    Configuration name password_reset.sms.max_per_day
    Configuration type System Properties (/sys_properties_list.do)
    Data type iIteger
    Recommended value 10
    Default value <none>
    Fallback value 5
    Category Authentication
    Security risk
    • Severity score: 5.9
    • CVSS score: Medium
    • Security risk details: If the value is too high, it's easier for attackers to brute force the SMS code.
    Dependencies and prerequisites None