---
sourceDocument: Xanadu Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/xanadu/platform-security

 Release :

    - xanadu

ft:locale :

    - en-US

ft:publication_title :

    - Xanadu Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Set OTP lifetime for password reset to 1 hour \[Updated in Security Center 2.0\]

# Set OTP lifetime for password reset to 1 hour \[Updated in Security Center 2.0\] {#ariaid-title1}

* Release version: Xanadu
* 
* Updated July 2, 2025
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Control the time duration of the link in the password reset email.
The glide.pwd_reset.onetime.token.validity system property makes the link in the password reset email expire after the number of hours specified in the property. The validity time of a password reset token
should be kept as short as possible while not disrupting normal user experience

Set the property value to 1 (in hours).

## More information {#sc-set-otp-lifetime-for-password-reset-to-12-hours-or-less__section_qhx_1b1_xwb}

{#sc-set-otp-lifetime-for-password-reset-to-12-hours-or-less__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | glide.pwd_reset.onetime.token.validity |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | integer |
| Recommended value | 1 |
| Default value | 1 |
| Fallback value | 1 |
| Category | [Authentication](https://www.servicenow.com/docs/YDXji7zJgrqX_w96zQhssA "The authentication category covers the main elements of modern authentication to confirm an entity and its claims are authentic and correct, resistant to impersonation and prevent interception of passwords.") |
| Security risk | * Severity score: 4.6 * CVSS score: Medium * Security risk details: A longer validity time for password reset token gives malicious actors a wider window to perform account takeover if the email with the reset token is leaked or compromised. {#sc-set-otp-lifetime-for-password-reset-to-12-hours-or-less__ul_g1g_3sf_xwb} |
| Dependencies and prerequisites | None |
[ ]

{#sc-set-otp-lifetime-for-password-reset-to-12-hours-or-less__table_ajc_b43_3kb}