Tell Users Duration of Incorrect Password Ban
When someone enters their password incorrectly too many times, the system tells them they are "banned" and to try again later but doesn't say when. I have been told that when you are banned, the system locks you out for two hours, and if you try to log in again during that two hour window, the clock restarts. Not telling the user this in the ban alert means that they may try to log back in in 5 minutes or half an hour, etc., and have no idea that they are pushing their ability to log in for another two hours. Please add a sentence to the ban alert that tells the user to wait two hours before trying again (or whatever timeframe if it varies by CoC).
Anonymous
shared this idea
Thank you for your feedback. We are currently reviewing this request.
-
Anonymous
commented
You can adjust the Lockout time on the system setup screen yourself. You can also customize the rather severe default "banned" message to say anything you'd like. Our CoC set our settings to lock out for 1hr after 5 attempts and changed and the banned message to "Too many incorrect password attempts have locked your account. Please email hmishelpdesk@ouragency.com for assistance."