Enable SMS code notification for enrollment and verification [Updated in Security Center 1.3]

  • Release version: Zurich
  • Updated July 31, 2025
  • 1 minute to read
  • The password_reset.sms.use_notify property controls the usage of SMS code notifications for password reset.

    If the password_reset.sms.use_notify property is set to the recommended value of true, the user is notified to do a password reset using SMS verification and new device enrollment which is more secure than email.

    More information

    Attribute Description
    Configuration name password_reset.sms.use_notify
    Configuration type System Properties (/sys_properties_list.do)
    Data type booelan
    Recommended value true
    Default value true
    Category Authentication
    Security risk
    • Severity score: 3.7
    • CVSS score: Low
    • Security risk details: Setting this property tofalse makes email the default method for password recovery which is less secure than SMS.
    Dependencies and prerequisites None