NIST 800-63A Digital Identity Guidelines suggests a maximum validity of 10 minutes for an SMS registration link, and 24 hours for email. You can’t go wrong there.
2 Likes
NIST 800-63A Digital Identity Guidelines suggests a maximum validity of 10 minutes for an SMS registration link, and 24 hours for email. You can’t go wrong there.