Minimize reset password max SMS per day [Updated in Security Center 1.3]

  • Release version: Yokohama
  • Updated January 30, 2025
  • 1 minute to read
  • Manage the maximum number of SMS codes sent for verification per day by user.

    The password_reset.sms.max_per_day property represents the maximum number of SMS codes that can be sent for verification daily by a user.

    More information

    Attribute Description
    Configuration name password_reset.sms.max_per_day
    Configuration type System Properties (/sys_properties_list.do)
    Data type integer
    Recommended value 10
    Default value 10
    Category Authentication
    Security risk
    • Severity score: 5.9
    • CVSS score: Medium
    • Security risk details: If this property is not set to the recommended value of 10 or less, it's easier to brute force the SMS code.
    Dependencies and prerequisites None