Account Lockout

Definitions

1. A security control that temporarily or permanently blocks account access after too many failed authentication attempts. Lockout policies can slow brute-force attacks, though they can also be abused for denial of service if designed poorly.

   In plain English: A security rule that blocks login after too many failed attempts.

   Example: "The help desk got flooded because the account lockout threshold was too aggressive for normal user mistakes."

Related Terms

• JWT
• Access Token
• Authentication Factor
• Authentication Protocol
• Baseline Security
• Brute Force Protection
• Bypass
• Challenge Token
• Credential Cache
• Face ID Security
• Identity Verification
• Long-Lived Token
• Masquerade Attack
• Out-of-Band Channel
• Proxy Authentication
• Residual Risk