Maximize reset password request retry window duration
The password_reset.request.retry_window property controls the number of minutes before the count for password reset attempts refreshes.
The password_reset.request.retry_window system property specifies the length of time before the count for password reset attempts refreshes.
Ensure that the property password_reset.request.retry_window is set to 1440 or more.
More information
| Attribute | Description |
|---|---|
| Configuration name | password_reset.request.retry_window |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | Integer |
| Recommended value | An integer greater than or equal to 1440 |
| Default value | <none> |
| Fallback value | 1440 |
| Category | Authentication |
| Security risk | - Severity score: 7.5 - CVSS rating: High - Security risk details: If the value is too low, then it will make brute forcing against password reset process attacks much faster. |
| Functional impact | None |
| Dependencies and prerequisites | None |
To learn more about adding or creating a system property, see Add a system property.
Parent Topic:Authentication