Minimize reset password SMS expiry duration

  • Release version: Australia
  • Updated March 12, 2026
  • 1 minute to read

    • Control the number of minutes remaining before the SMS code expires.

    The password_reset.sms.expiry system property denotes the number of minutes before the SMS code expires.

    Ensure the property password_reset.sms.expiry is set to 5 or less.

    More information

    Attribute Description
    Configuration name password_reset.sms.expiry
    Configuration type System Properties (/sys_properties_list.do)
    Data type Integer
    Recommended value An integer less than or equal to 5
    Default value <none>
    Fallback value 5
    Category Authentication
    Security risk
    • Severity score: 5.6
    • CVSS rating: Medium
    • Security risk details: If the value is too high, an attacker may guess the SMS code to reset the password.
    Functional impact None
    Dependencies and prerequisites None