Property reference

password_reset.sms.default_complexity

The password_reset.sms.default_complexity property defines the number of digits in the SMS code sent to users for password reset. Admins should review this setting to ensure it meets security requirements and user experience standards.

Default: 6 Type: integer Application: Global

Key questions about this property

The answers below summarize the purpose, scope, default effect, and review scenarios for this property.

What does it do? This property specifies the integer value representing the number of digits in the SMS verification code for password resets.
What area does it affect? Password Reset Functionality
What does the default mean? The default value is "6", which sets the baseline numeric behavior for this property.
When should you review it? Review this property when adjusting security measures or user authentication processes.

Out of the box property record

Raw metadata from the property record.

Property name password_reset.sms.default_complexity
Sys ID 3fb4034deb6001006a668c505206fee6
Type integer
Application Global
Default value 6
Description Number of digits in the SMS code sent to the user
Updated 2024-05-25 04:20:22

Sources

Official references and nearby text excerpts where this property appears.

Documentation excerpt View supporting context
Context preview Snippet 1
... password_reset.request.success_window Specifies how long a user is locked out after they have successfully reset their password. • Type: integer • Default value: 10 (minutes) • Location: Password Reset > Properties password_reset.sms.default_complexity Specifies the number of characters in the SMS code that are required for a user to reset their password. Note: This SMS code property can be overridden by adding a ...
Documentation excerpt View supporting context
Context preview Snippet 2
... the risk of successfully brute forcing a password as a greater number of password reset attempts can be made. Maximize reset password SMS complexity • Description ◦(Old‎ <blank> ◦(New‎ If "password_reset.sms.default_complexity" is not set to the recommended value of "6" or greater, then a weak SMS validation token is used. • Security Risk ◦(Old‎ <blank> ◦(New‎ This increases the possibility of ...
Documentation excerpt View supporting context
Context preview Snippet 3
... (minutes) Note: You can override this SMS code property by adding the pause_window parameter in the SMS code verification. Number of digits in the SMS code sent to the user password_reset.sms.default_complexity Number of characters required for a user to reset their password. • Type: integer • Default value: 4 (digits) You can override this SMS code property by adding the complexity ...