Minimize reset password request success window duration

reference brazil Updated Sep 10, 2026 1 min read sc-reset-password-request-success-window.md
Raw file servicenow.com

The password_reset.request.success_window property controls the number of minutes a user must wait to reset or change their password again after successfully resetting the password. The user will be blocked to reset the password again for the specified duration.

If the password_reset.request.success_window system property isn't set to the recommended value of 1440 or less, then the opportunity of someone else abusing the password reset functionality to gain unauthorized access to a user account is increased.

Ensure the property password_reset.request.success_window is set to 1440 or less.

More information

Attribute

Description

Configuration name

password_reset.request.success_window

Configuration type

System Properties (/sys_properties_list.do)

Data type

Integer

Recommended value

An integer less than or equal to 1440

Default value

1440

Fallback value

1440

Category

Authentication

Security risk

  • Severity score:
  • CVSS rating:
  • Security risk details:

Functional impact

None

Dependencies and prerequisites

None

**Parent Topic:**[Authentication](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-authentication.md)
Search documentation
Search document titles and file paths on the brazil branch