How to Manage the Account Recovery Email Validity Period
Jan 12, 2026
Administration
Okta Classic Engine
Okta Identity Engine
Overview
Applies To
- Password Reset
- Account unlock emails
- Reset/unlock recovery emails' validity
- Okta Classic Engine
Solution
Follow the steps or video below.
-
Go to Security > Authentication > select the Password Policy that needs to be changed, and click the Edit button.
-
In the Policy pop-up that appears, look for the Account Recovery section. Use the drop-down option to modify the reset/unlock recovery email validity lifespan.
The validity of the Recovery token can also be managed via API as detailed here: Authentication UI - Recovery Token.
This was changed in Okta Identity Engine to 30 mins max for security reasons: https://support.okta.com/help/s/article/What-Is-the-Maximum-Lifetime-of-the-Email-Challenge-For-Email-Authenticator
