Codes are single-use and expire after 15 minutes. A completed reset also clears any lock Roman placed after failed attempts.