Brute-force attacks and repeated login attempts can pose a threat to your applications. To help mitigate this risk, Login Lockout adds an additional layer of protection to your app’s authentication flow.
This feature allows you to define how many failed login attempts are allowed before temporarily blocking access to the account. The lockout duration is also fully configurable, giving you control over how long the restriction lasts.
By limiting the number of failed login attempts, Login Lockout helps reinforce overall app security.
Requirements
An active Ubidots account with an Enterprise license.
1. How to Configure the Login Lockout
To configure the login lockout in your app, just follow these simple steps:
Click on “apps”.
Go to the settings of the app you want to edit.
On the left-hand menu, click on "settings" and then on "security".
Scroll down to the "session management" section.
Define the number of login attempts a user can make before the access to the account becomes blocked.
Define the number of minutes for which access will be blocked.
Click on the “save” button.