Does the alternate email or SMS code expire?
Published on: September 11, 2015
Yes. When the user receives the validation code via alternate email or SMS, this code is valid for 5 minutes for security reasons. The code is also only valid within the current browser session where it was requested. Users should remain on the same page and complete the reset steps as soon as they request the code.