Skip to content
Release: Australia · Updated: 2026-03-12 · Official documentation · View source

SMS Code Verification type for Password Reset

Using the Simple Message Service (SMS) Code Verification type, a user can verify identity with the help of any SMS-enabled device, like a cell phone that accepts text messages. When a user requests password reset, the system sends a numerical code to the device and the user then enters the code on the Password Reset Verification page.

You can change the default behavior of an SMS code verification using either of the following methods:

  • Set parameter values, as shown in the table.
  • Update property settings for the Password Reset application.

Note: The system allows only one instance of each SMS code parameter.

Parameter nameDescription
expiry

Number of minutes the verification code is valid.Data Type: integer (any positive integer)

Default Value: 5

complexity

Number of digits in the numerical verification code.Data Type: integer (any positive integer)

Default Value: 6

pause\_window

Number of minutes before the user can request another SMS code for verification.Data Type: integer (any positive integer)

Default Value: 2

max\_per\_day

Maximum number of codes sent for verification in one day.Data Type: integer (any positive integer)

Default Value: 10

User experience

For information on how users enroll for SMS verification, see Enroll for the Password Reset program using SMS codes.

  • Use Notify to send SMS codes for enrollment and verification
    You can configure the Password Reset application to send SMS codes for enrollment and verification using the ServiceNow Notify application (via the Twilio SMS Messaging system). Notify is tightly integrated with the workflow engine and business rules and delivers a highly configurable and trusted way to deliver SMS messages.

Parent Topic:Password Reset verifications