---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Control Lockout Time for Invalid Password Reset Attempts \[Updated in Security Center 1.3 and 2.0\]

# Control Lockout Time for Invalid Password Reset Attempts \[Updated in Security Center 1.3
and 2.0\] {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

The password_reset.request.max_attempt_window property controls
the number of minutes a user must wait to reset or change their password after exceeding the
maximum number of unsuccessful attempts that is set with the
password_reset.request.max_attempt property.
The password_reset.request.max_attempt_window property defines the
number of minutes a user must wait to reset or change their password after exceeding the
maximum number of unsuccessful attempts that is set with the
password_reset.request.max_attempt property. A small number of
minutes for the password_reset.request.max_attempt_window property
increases the risk of successfully brute forcing a password as a greater number of
password reset attempts can be made. The default of 1440 minutes is recommended.

Ensure the property password_reset.request.max_attempt_window is
set to 1440 or greater.

## More information {#sc-reset-password-request-max-attempts-window__section_more_information}

{#sc-reset-password-request-max-attempts-window__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Property name | password_reset.request.max_attempt_window |
| Configuration type | System Properties (/sys_properties_list.do) |
| Category | [Authentication](https://servicenow-prod.fluidtopics.net/faHnGPrE5YkSR8Xq~3OW5g "The authentication category covers the main elements of modern authentication to confirm an entity and its claims are authentic and correct, resistant to impersonation and prevent interception of passwords.") |
| Purpose | Denotes the lockout period in minutes after the maximum number of unsuccessful password reset attempts has been met. |
| Recommended value | 1440 |
| Default value | 1440 |
| Configuration type | Positive integer values |
| Security risk | (High) If the property is not set to the recommended value of 1440 or less, then it could be possible to perform account brute force as the account will not be locked after a maximum number of wrong authentication attempts. |
| Security risk rating | 7.5 |
| References | [Configure Password Reset properties](https://servicenow-prod.fluidtopics.net/dHCEKCtJh_VW3P_3HkFVCQ "You can specify properties that configure the Password Reset experience for end users.") |
[ ]

{#sc-reset-password-request-max-attempts-window__table_ajc_b43_3kb}

To learn more about adding or creating a system
property, see [Add a system property](https://www.servicenow.com/docs/access?context=t_AddAPropertyUsingSysPropsList&version=australia&pubname=australia-platform-administration&ft:locale=en-US).