Property reference

password_reset.request.max_attempt

The password_reset.request.max_attempt property sets the maximum number of unsuccessful attempts allowed when users try to reset or change their passwords. Administrators should monitor this setting to balance security and user accessibility, as the default is three attempts.

Default: 3 Type: integer Application: Global

Key questions about this property

The answers below summarize the purpose, scope, default effect, and review scenarios for this property.

What does it do? This property limits the number of failed password reset attempts to enhance security and prevent unauthorized access.
What area does it affect? Password Management
What does the default mean? The default value is "3", which sets the baseline numeric behavior for this property.
When should you review it? Review this property when adjusting security policies or responding to user access issues.

Out of the box property record

Raw metadata from the property record.

Property name password_reset.request.max_attempt
Sys ID 5dc9ade0ebc101006a668c505206fede
Type integer
Application Global
Default value 3
Description Number of unsuccessful attempts allowed for resetting/changing password
Updated 2024-05-25 04:24:51

Sources

Official references and nearby text excerpts where this property appears.

Documentation excerpt View supporting context
Context preview Snippet 1
... 1 Act Increased number of unsuccessful password reset attempts Setting this property to a greater value may allow hackers multiple attempts to log in. Set the value of the property "password_reset.request.max_attempt" to 3 password attempts. Documentation sn_SE10444 1 RecommendIntegration accounts assigned the Admin role Integration accounts with administrative access serve as potential security threats. Ensure that Integration account users are not ...
Documentation excerpt View supporting context
Context preview Snippet 2
... verification. • Type: integer • Default value: 3 (questions) • Possible values: integers that are less than the number specified for the num_enroll property. • Location: Password Reset > Properties password_reset.request.max_attempt Specifies the number of password reset attempts a user has before they are locked out for a period determined by the value in max_attempt_window. • Type: integer • Default value: ...
Documentation excerpt View supporting context
Context preview Snippet 3
... Updates Short expiration windows are critical to reducing the opportunity for unauthorized password resets and maintaining account security. Limit Invalid Password Reset Attempts • Description ◦(Old‎ <blank> ◦(New‎ The property "password_reset.request.max_attempt" dictates the maximum number of unsuccessful password reset attempts that can be taken before the user is locked out of password reset process. The lockout period is determined by the ...
Documentation excerpt View supporting context
Context preview Snippet 4
... To use the base system CAPTCHA, change the password_reset.captcha.google. system property to false. See Configure Google reCAPTCHA Password Reset Request Properties Number of unsuccessful attempts allowed to resetting/ changing password password_reset.request.max_attempt Number of password reset attempts a user is allowed before they are locked out for a period determined by the value in max_attempt_window. © 2026 ServiceNow, Inc. All rights reserved. ...