Minimize reset password max SMS per day

reference australia Updated Sep 10, 2026 1 min read sc-reset-password-max-sms-per-day.md
Raw file servicenow.com

Manage the maximum number of SMS codes sent for verification per day by user.

The password_reset.sms.max_per_day system property determines the maximum number of SMS codes sent for verification per day for a user.

Set the property password_reset.sms.max_per_day to a value of `` or less.

More information

Attribute

Description

Configuration name

password_reset.sms.max_per_day

Configuration type

System Properties (/sys_properties_list.do)

Data type

iIteger

Recommended value

10

Default value

<none>

Fallback value

5

Category

Authentication

Security risk

  • Severity score: 5.9
  • CVSS score: Medium
  • Security risk details: If the value is too high, it's easier for attackers to brute force the SMS code.

Dependencies and prerequisites

None

**Parent Topic:**[Authentication](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-authentication.md)
Search documentation
Search document titles and file paths on the australia branch