Brute-force protection blocked message not displayed until next login

[sruz]

We have all the settings for Brute-force protection enabled.

When the user reaches the login attempts as setup in the login threshhold, the email is sent to the user to unblock the login, however the blocked message is not displayed on the login page until the next time the user attempts to login. This is not good from a user experience point of view. The user is sent an email but is not told about it when the email is sent.

What makes it worse is that at the next attempt if the user types enters the correct password the blocked error message is displayed.

Please respond

Thank you

[rueben.tiow]

Hi @sruz,

I recommend referring to one of my posts regarding this exact situation:

Not displayed 'Account Blocked' Message Immediately After Threshold is Reached

Hi @nirajan.kunwor, Thanks for reaching out to the Auth0 Community! Unfortunately, the brute force protection error message is only displayed after the user is blocked, which happens on the next login attempt, even after the user provides the correct password. I understand this isn’t clear for your end-users and is not an ideal UX. However, there is an option to customize the error message through the Custom Text to change the default error message to include the email notification. Please r…

Let me know if you have any additional questions.

Thanks,
Rueben