Login security
Limiting failed login attempts.
Settings > Security
- 1
Open Security
Settings > Security holds the Login Attempt Limit setting.
- 2
Set a limit
The limit is the maximum number of failed logins before an account is automatically disabled. The count resets to 0 on a successful login.
- 3
No Limit is not recommended
The system itself warns that removing all restrictions leaves you open to a brute-force attack. Set a sensible number such as 10.
- 4
Re-enabling an account
An Administrator sets the locked-out user back to Enabled under Users > List Admin Users.
Related guides
- Staff accounts and roles — Creating admin users and choosing the right role.
- Signing in and out — How to log in to the admin area and sign out safely at the end of a shift.