Minimize reset password SMS expiry duration

reference brazil Updated Sep 10, 2026 1 min read sc-reset-password-sms-expiracy.md
Raw file servicenow.com

Control the number of minutes remaining before the SMS code expires.

The password_reset.sms.expiry system property denotes the number of minutes before the SMS code expires.

Ensure the property password_reset.sms.expiry is set to 5 or less.

More information

Attribute

Description

Configuration name

password_reset.sms.expiry

Configuration type

System Properties (/sys_properties_list.do)

Data type

Integer

Recommended value

An integer less than or equal to 5

Default value

5

Fallback value

5

Category

Authentication

Security risk

  • Severity score: 5.6
  • CVSS rating: Medium
  • Security risk details: If the value is too high, an attacker may guess the SMS code to reset the password.

Functional impact

None

Dependencies and prerequisites

None

**Parent Topic:**[Authentication](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/platform-security/instance-security-hardening-settings/sc-authentication.md)
Search documentation
Search document titles and file paths on the brazil branch