--- title: Minimize reset password SMS expiry duration description: Control the number of minutes remaining before the SMS code expires. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/platform-security/instance-security-hardening-settings/sc-reset-password-sms-expiracy.html release: australia product: Instance Security Hardening Settings classification: instance-security-hardening-settings topic_type: reference last_updated: "2026-03-12" reading_time_minutes: 1 breadcrumb: [Authentication, Hardening settings, Platform Security] --- # Minimize reset password SMS expiry duration Control the number of minutes remaining before the SMS code expires. The **password\_reset.sms.expiry** system property denotes the number of minutes before the SMS code expires. Ensure the property **password\_reset.sms.expiry** is set to `5` or less. ## More information
Attribute Description
Configuration name **password\_reset.sms.expiry**
Configuration type System Properties \(/sys\_properties\_list.do\)
Data type Integer
Recommended value An integer less than or equal to 5
Default value <none>
Fallback value 5
Category [Authentication](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-authentication.md)
Security risk - Severity score: 5.6 - CVSS rating: Medium - Security risk details: If the value is too high, an attacker may guess the SMS code to reset the password.
Functional impact None
Dependencies and prerequisites None
**Parent Topic:**[Authentication](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-authentication.md)