policy auth_error ai_generated true

Account locked: too many failed authentication attempts

ID: policy/password-policy-lockout

Also available as: JSON · Markdown
85%Fix Rate
88%Confidence
3Evidence
2023-01-01First Seen

Version Compatibility

VersionStatusIntroducedDeprecatedNotes
any active

Root Cause

Account lockout due to password policy.

generic

Workarounds

  1. 88% success Implement progressive delays instead of hard lockout
  2. 92% success Add MFA to reduce reliance on password-only auth

Dead Ends

Common approaches that don't work:

  1. Disable account lockout 90% fail

    Brute force vulnerability

  2. Set lockout threshold very high (100+ attempts) 78% fail

    Reduces protection significantly