diff --git a/src/manage/account/dashboard-locked-account.webp b/src/manage/account/dashboard-locked-account.webp new file mode 100644 index 00000000..e1417fb8 Binary files /dev/null and b/src/manage/account/dashboard-locked-account.webp differ diff --git a/src/manage/account/dashboard-locked-account.xcf b/src/manage/account/dashboard-locked-account.xcf new file mode 100644 index 00000000..9648a674 Binary files /dev/null and b/src/manage/account/dashboard-locked-account.xcf differ diff --git a/src/manage/account/index.md b/src/manage/account/index.md index 32977765..6310d1d8 100644 --- a/src/manage/account/index.md +++ b/src/manage/account/index.md @@ -86,3 +86,11 @@ Check your spam folder if the email with password reset link does not appear in If that's not the case, please contact to resolve this issue. ::: +## Locked account after failed login +To protect against brute-force password guessing, temporarily locks your account after 5 unsuccessful sign-in attempts. + +![Mergin Maps dashboard locked account warning](./dashboard-locked-account.webp "Mergin Maps dashboard locked account warning") + +If this happens, you will receive an email with a link to restore your account. + +The account is locked for 5 minutes initially. However, if incorrect credentials are entered repeatedly after the account is restored, it will be locked for 1 hour.