# Unlocking user behavior and customization

**URL:** <https://community.auth0.com/t/unlocking-user-behavior-and-customization/196081>\
**Category:** Get Help\
**Tags:** login-experience, new-universal-login-experience\
**Created:** [January 8, 2026, 8:00pm UTC](https://community.auth0.com/t/unlocking-user-behavior-and-customization/196081 "2026-01-08T20:00:08Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Vijay.Mohite](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/vijay.mohite/32/78021_2.png) [@Vijay.Mohite](https://community.auth0.com/u/Vijay.Mohite)\
**Post date:** [January 8, 2026, 8:00pm UTC](https://community.auth0.com/t/unlocking-user-behavior-and-customization/196081/1 "2026-01-08T20:00:08Z")

</div>

If user gets locked due to multiple failed login attempts, what is the default timeout to get thyself unlocked? Is it configurable? Is there self service to get unlocked by another user in the same organization?

In **Brute-force Protection** of **Attack Protection** no such configuration is available. Is there any other place?

---

<div class="post-metadata">

**Author:** ![remus.ivan](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/remus.ivan/32/68771_2.png) [@remus.ivan](https://community.auth0.com/u/remus.ivan)\
**Post date:** [January 9, 2026, 4:16pm UTC](https://community.auth0.com/t/unlocking-user-behavior-and-customization/196081/3 "2026-01-09T16:16:35Z")

</div>

Hi @Vijay.Mohite,

Welcome to the Auth0 Community!

To answer your specific questions regarding Brute-force Protection:

- The default timeout is **30 days** from the last failed login attempt. This duration is a fixed system limit and is **not configurable**. Note that each new failed attempt resets this 30-day window.
- There is no current feature for a standard user to unlock another. Unlocking must be performed by a **Tenant Administrator** or by the **affected user** themselves.

How a user can be unblocked:

1. **Administrator Action:** An admin can remove the block via the Auth0 Dashboard (User profile) or the [Management API](https://www.google.com/search?q=https://auth0.com/docs/api/management/v2/%23!/User_Blocks/delete_user_blocks).
2. **User Self-Service:** The user can click the unblock link in the **Blocked Account Email** (if you have this enabled) or by successfully completing a **Password Reset**.
3. **Threshold Adjustment:** While the 30-day duration isn’t configurable, the **Maximum Attempts** (the threshold that triggers the block) can be adjusted in **Security \> Attack Protection \> Brute-force Protection**.

This options are also described in the following article - [Error “Your Account has been Blocked After Multiple Consecutive Login Attempts”](https://support.auth0.com/center/s/article/Your-Account-has-been-Blocked-After-Multiple-Consecutive-Login-Attempts-Error), which contains a video explanation as well.

**Customization:** If you want to guide users on how to unblock themselves, you can [Customize the Error Message](https://support.auth0.com/center/s/article/Customize-Error-Message-Displayed-to-Users-Who-Are-Blocked) they see on the login screen or customize the **Blocked Account Email** template.

As you noted, since the timeout duration itself is not configurable, I recommend creating a [Product Feedback](https://community.auth0.com/c/feedback/95) request if this is a requirement for you, since others might be interested in such a feature as well and get updated for possible future implementations.

I hope this helps!  
Thank you,  
Remus

---

<div class="post-metadata">

**Author:** ![Vijay.Mohite](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/vijay.mohite/32/78021_2.png) [@Vijay.Mohite](https://community.auth0.com/u/Vijay.Mohite)\
**Post date:** [January 9, 2026, 4:42pm UTC](https://community.auth0.com/t/unlocking-user-behavior-and-customization/196081/4 "2026-01-09T16:42:35Z")

</div>

Thank you and appreciate it. This is much helpful.

Regards!

---

<div class="post-metadata">

**Author:** ![remus.ivan](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/remus.ivan/32/68771_2.png) [@remus.ivan](https://community.auth0.com/u/remus.ivan)\
**Post date:** [January 9, 2026, 4:47pm UTC](https://community.auth0.com/t/unlocking-user-behavior-and-customization/196081/5 "2026-01-09T16:47:54Z")

</div>

Hi @Vijay.Mohite,

I am glad this helps!  
Have a great one,  
Remus

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [January 23, 2026, 4:48pm UTC](https://community.auth0.com/t/unlocking-user-behavior-and-customization/196081/6 "2026-01-23T16:48:03Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
