Maximize reset password SMS pause window duration [Updated in Security Center 1.3]
-
- UpdatedJan 30, 2025
- 1 minute read
- Yokohama
- Platform Security
Manage the time duration in minutes that a user must wait before they can request a new password reset code.
If this property is not set to the recommended value of 2 minutes or more, then a malicious user could initiate many passwords reset codes in a brief window of time. This increases the chance of a bad actor predicting the SMS reset code.