Hey, I have enabled brute force protection, and set the threshold as 5 attempts. A user complained about her account getting blocked after a single failed attempt. I checked the logs, and confirmed there is only a single failed attempt. Why is this happening?

The incorrect attempt count reset will be triggered only after the user has successfully logged in. Since the user has 4 incorrect login attempts earlier, that explains why she got locked after one additional such attempt.

Why is user blocked

Get Help

Topic		Replies	Views
Blocked account although no failed login attempts recorded Get Help	5	4110	November 14, 2018
Block user issue Get Help	4	1435	September 14, 2022
Unblock user after consecutive failed login Get Help	2	4418	June 17, 2020
Trying to unsuccessfully login 20 times doesn't throw too_many_attempts exception anymore? Get Help auth0 , too_many_attempts-no , brute-force	11	4907	April 13, 2021
Response returned after brute force triggered is wrong Get Help active-directory , api , api-authorization , brute-force	4	4536	March 2, 2018

Why is user blocked

Related topics