Property reference

password_reset.sms.pause_window

The password_reset.sms.pause_window property defines the waiting period in minutes before a user can request another SMS verification code. This setting helps prevent abuse by limiting the frequency of SMS requests during the password reset process.

Default: 2 Type: integer Application: Global

Key questions about this property

The answers below summarize the purpose, scope, default effect, and review scenarios for this property.

What does it do? It specifies the duration users must wait before they can send a new SMS code for verification, with a default value of 2 minutes.
What area does it affect? Password Reset Process
What does the default mean? The default value is "2", which sets the baseline numeric behavior for this property.
When should you review it? An admin should review this property when adjusting security measures for password recovery.

Out of the box property record

Raw metadata from the property record.

Property name password_reset.sms.pause_window
Sys ID 88e86953eb3101006a668c505206fe29
Type integer
Application Global
Default value 2
Description Number of minutes before the user can attempt to send another SMS code for verification
Updated 2024-05-25 04:33:56

Sources

Official references and nearby text excerpts where this property appears.

Documentation excerpt View supporting context
Context preview Snippet 1
... be overridden by adding a value for the max_per_day parameter in an SMS code verification. • Type: integer • Default value: 10 (per day) • Location: Password Reset > Properties password_reset.sms.pause_window Specifies the amount of time to pass before another SMS code can be sent to a user. Note: This SMS code property can be overridden by adding a value for ...
Documentation excerpt View supporting context
Context preview Snippet 2
... default publicly accessible. • Security Risk ◦(Old‎ <blank> ◦(New‎ Sensitive information may be exposed to unauthenticated users. Maximize reset password SMS pause window duration • Description ◦(Old‎ <blank> ◦(New‎ If "password_reset.sms.pause_window" is not set to the recommended value of "2" minutes or greater, then a malicious user could initiate many password reset SMS codes in a brief window of time. • ...
Documentation excerpt View supporting context
Context preview Snippet 3
... override this SMS code property by adding the max_per_day parameter in the SMS code verification. Number of minutes before the user can attempt to send another SMS code for verification password_reset.sms.pause_window Time that must pass before another SMS code can be sent to a user. • Type: integer • Default value: 2 (minutes) Note: You can override this SMS code property ...