Lockout Policy
Noun · Security & Infosec
Definitions
A policy that temporarily or permanently blocks an account after too many failed login attempts, intended to slow password guessing and credential stuffing. Lockout policies must be tuned carefully because overly aggressive settings can also be abused for denial of service against legitimate users.
In plain English: A rule that locks an account after too many failed login attempts.
Example: "The lockout policy stopped the guessing attack, but it also locked dozens of users out when the attacker sprayed common passwords."