Minimize reset password max SMS per day
Manage the maximum number of SMS codes sent for verification per day by user.
The password_reset.sms.max_per_day system property determines the maximum number of SMS codes sent for verification per day for a user.
Set the property password_reset.sms.max_per_day to a value of `` or less.
More information
| Attribute | Description |
|---|---|
| Configuration name | password_reset.sms.max_per_day |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | iIteger |
| Recommended value | 10 |
| Default value | <none> |
| Fallback value | 5 |
| Category | Authentication |
| Security risk | - Severity score: 5.9 - CVSS score: Medium - Security risk details: If the value is too high, it's easier for attackers to brute force the SMS code. |
| Dependencies and prerequisites | None |
Parent Topic:Authentication