[Feature Request] Brute Force Protection for PIN and Password authentification #984

New Issue

MrUnknownDE · 2026-04-05T18:04:21+02:00

MrUnknownDE commented

2026-04-05 18:04:21 +02:00

Originally created by @PottiMc on 8/31/2025

Currently, PIN and password protection don't have any brute-force protection. At least I could try it like 15 times without any notification. Security would be far better even with a small brute-force protection like timeouts after 3 unsuccessfull attempts or so. Of course, a professional brute-force protection with block lists, etc. would be far better, but I can't measure the developing time needed to implement such a solution.

*Originally created by @PottiMc on 8/31/2025* Currently, PIN and password protection don't have any brute-force protection. At least I could try it like 15 times without any notification. Security would be far better even with a small brute-force protection like timeouts after 3 unsuccessfull attempts or so. Of course, a professional brute-force protection with block lists, etc. would be far better, but I can't measure the developing time needed to implement such a solution.

MrUnknownDE closed this issue

2026-04-05 18:04:21 +02:00

Sign in to join this conversation.

Branches Tags

main

dev

dependabot/npm_and_yarn/dev-minor-updates-b4e5d6b9c5

revert-2766-feature/systemd-install-instructions

dependabot/npm_and_yarn/prod-patch-updates-05702d39f2

dependabot/npm_and_yarn/next-16.2.1

dependabot/npm_and_yarn/recharts-3.8.1

alerting-rules

private-site-ha

dependabot/docker/docker/library/node-25-slim

ssh

delete-account

msg-delivery

org-only-idp

cicd

patch

site-targets-auto-login

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/pangolin#984