Maximize reset password request retry window duration

  • Release version: Australia
  • Updated March 12, 2026
  • 1 minute to read

    • The password_reset.request.retry_window property controls the number of minutes before the count for password reset attempts refreshes.

    The password_reset.request.retry_window system property specifies the length of time before the count for password reset attempts refreshes.

    Ensure that the property password_reset.request.retry_window is set to 1440 or more.

    More information

    Attribute Description
    Configuration name password_reset.request.retry_window
    Configuration type System Properties (/sys_properties_list.do)
    Data type Integer
    Recommended value An integer greater than or equal to 1440
    Default value <none>
    Fallback value 1440
    Category Authentication
    Security risk
    • Severity score: 7.5
    • CVSS rating: High
    • Security risk details: If the value is too low, then it will make brute forcing against password reset process attacks much faster.
    Functional impact None
    Dependencies and prerequisites None

    To learn more about adding or creating a system property, see Add a system property.