Lock accounts after X login failures, configurable #2000

New Issue

MrUnknownDE · 2026-04-06T02:47:51+02:00

MrUnknownDE commented

2026-04-06 02:47:51 +02:00

Originally created by @Willena on 9/16/2022

I saw this feature request in #246

The implementation reuse the user enabling feature to lock the account. It simply automatically disable the user when the number of retries is reach. When locked, only an admin can re-enable the user account.

A new column has been added to the user schema to store the number of failed attempts.
It is configurable with the login_max_retry configuration key. The default value is 0 which disable automatic account locking

Any remarks tips and comments are welcomed as I'm not yet familiar with rust and currently trying to learn it

*Originally created by @Willena on 9/16/2022* I saw this feature request in #246 The implementation reuse the user enabling feature to lock the account. It simply automatically disable the user when the number of retries is reach. When locked, only an admin can re-enable the user account. A new column has been added to the user schema to store the number of failed attempts. It is configurable with the `login_max_retry` configuration key. The default value is 0 which disable automatic account locking *Any remarks tips and comments are welcomed as I'm not yet familiar with rust and currently trying to learn it*

MrUnknownDE closed this issue

2026-04-06 02:47:51 +02:00

Sign in to join this conversation.

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/vaultwarden#2000