--- title: Minimize reset password request expiration duration description: The password\_reset.request.expiry denotes the time period in minutes during which a user must perform the password reset process. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/platform-security/instance-security-hardening-settings/sc-reset-password-request-expiration.html release: australia product: Instance Security Hardening Settings classification: instance-security-hardening-settings topic_type: reference last_updated: "2026-03-12" reading_time_minutes: 1 breadcrumb: [Authentication, Hardening settings, Platform Security] --- # Minimize reset password request expiration duration The **password\_reset.request.expiry** denotes the time period in minutes during which a user must perform the password reset process. If the **password\_reset.request.expiry** system property is not set to the recommended value of `10` or less, then it increases the opportunity for someone else to guess and use the request and attempt to reset the password. Ensure that the property **password\_reset.request.expiry** is set to `10` or less. **Note:** The setting for the**password\_reset.request.expiry** property takes precedence over the setting for **glide.pwd\_reset.onetime.token.validity**property that has a 12 hour default. ## More information
| Attribute | Description |
|---|---|
| Configuration name | **password\_reset.request.expiry** |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | Boolean |
| Recommended value | An integer less than or equal to 10 |
| Default value | <none> |
| Fallback value | 100 |
| Category | [Configure Password Reset properties](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/authentication/t_SetPwdResetProps.md) |
| Security risk | - Severity score: 4.2 - CVSS rating: Medium - Security risk details: Short expiration windows are critical to reducing the opportunity for unauthorized password resets and maintaining account security. |
| Functional impact | None |
| Dependencies and prerequisites | None |