# Why account is blocked if it doesn't use email/password connection?

**URL:** <https://community.auth0.com/t/why-account-is-blocked-if-it-doesnt-use-email-password-connection/8456>\
**Category:** Get Help\
**Tags:** blocked-account\
**Created:** [October 11, 2017, 10:11pm UTC](https://community.auth0.com/t/why-account-is-blocked-if-it-doesnt-use-email-password-connection/8456 "2017-10-11T22:11:03Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![dl1](https://upload.wikimedia.org/wikipedia/commons/thumb/7/7c/User_font_awesome.svg/768px-User_font_awesome.svg.png) [@dl1](https://community.auth0.com/u/dl1)\
**Post date:** [October 11, 2017, 10:11pm UTC](https://community.auth0.com/t/why-account-is-blocked-if-it-doesnt-use-email-password-connection/8456/1 "2017-10-11T22:11:03Z")

</div>

Hi.

I’ve run into strange behaviour of Auth0…

User signed-up with Social connection(facebook). Facebook account is registered for  
‘email@nowhere.com’ email.  
Auth0 created account for user

```
  user_id facebook|164.....
  identities
  
    {
      "provider": "facebook",
      "user_id": "164....",
      "connection": "facebook",
      "isSocial": true
    }
  ]

```

Looks OK so far.

Then user tired to sign-in using email/password connection, and used the same email address which is used by Facebook([email@nowhere.com](mailto:email@nowhere.com)).  
After 10 failed login attempts Auth0 started returning “Your account has been blocked after multiple consecutive login attempts.” error and added the following to user’s account:

```
blocked_for

  {
    "identifier": "email@nowhere.com",
    "connection": "Username-Password-Authentication",
    "ip": "xx.xx.xx.xx"
  }
]

```

No “Blocked Account Email” has been sent.

Then user tired to sign-in with facebook - logged in fine.

So, why Auth0 marks account as “blocked” if it’s not actually blocked,  
and looks like that account cannot be blocked cause uses only social connection(no email/password connection)?

Thanks.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [March 2, 2018, 5:56am UTC](https://community.auth0.com/t/why-account-is-blocked-if-it-doesnt-use-email-password-connection/8456/2 "2018-03-02T05:56:56Z")

</div>