---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Maximize reset password SMS complexity

# Maximize reset password SMS complexity {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
The password_reset.sms.default_complexity property controls the minimum required SMS code verification size required during password reset.
If the password_reset.sms.default_complexity system property isn't set to the recommended value of <kbd class="ph userinput">6</kbd> or greater, then a weak SMS validation token is used.

Ensure the property password_reset.sms.default_complexity is set to <kbd class="ph userinput">6</kbd> or more.

## More information {#sc-reset-password-sms-complexity__section_wc1_cqn_phc}

{#sc-reset-password-sms-complexity__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | password_reset.sms.default_complexity |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | Integer |
| Recommended value | 6 or higher |
| Default value | 6 |
| Fallback value | 4 |
| Category | [Authentication](https://www.servicenow.com/docs/SZIHG9SfxVh2_gyMf2ec2Q "The authentication category covers the main elements of modern authentication to confirm an entity and its claims are authentic and correct, resistant to impersonation and prevent interception of passwords.") |
| Security risk | * Severity score: * CVSS rating: * Security risk details: This increases the possibility of token guessing which could lead to account takeover. {#sc-reset-password-sms-complexity__ul_g1g_3sf_xwb} |
| Functional impact | None |
| Dependencies and prerequisites | None |
[ ]

{#sc-reset-password-sms-complexity__table_ajc_b43_3kb}