Security measures proposal - User login brute force prevention, and more

Contribute Feature
10

This is not a good idea, because it’s a very easy denial of service against an account. Lockouts should never be on an account, but on an IP address.

1 Like