Control the number of minutes remaining before the SMS code expires.

The password_reset.sms.expiry property represents the number of minutes remaining before the SMS code expires.

More information

AttributeDescription
Configuration name password_reset.sms.expiry
Configuration type System Properties (/sys_properties_list.do)
Data type integer
Recommended value 5
Default value 5
Category Authentication
Security risk
  • Severity score: 5.6
  • CVSS score: Medium
  • Security risk details: If this property is not set to the recommended value of 5 or less, the chances of a bad actor guessing and using the SMS code to reset the password increases.
Dependencies and prerequisites None