Account Lockout Protection

Account Lockout Protection

Learn Amp includes built-in protection against unauthorised access attempts. If someone tries to guess a password repeatedly, the account is temporarily locked to keep it secure.

This article explains how account lockouts work, what triggers them, and how to unlock an account.


Overview

Account lockout protection is an automatic security feature that:

  • Detects repeated failed login attempts

  • Temporarily locks accounts after too many failures

  • Permanently locks accounts if abuse continues

  • Notifies users and Admins when lockouts occur

This helps protect your organisation from brute-force attacks and unauthorised access attempts.


Functionality Breakdown

Temporary Lockout

  • Trigger: 10 failed login attempts

  • Duration: 30 minutes

  • User notification: Email sent to the user

  • Automatic unlock: Yes, after 30 minutes

Permanent Lockout

  • Trigger: Account locked twice within 24 hours

  • Duration: Until manually unlocked by an Admin

  • Notifications: Email sent to the user, Admin/Owner, and Learn Amp support

  • Automatic unlock: No—requires Admin intervention


Pre-requisites

Role Requirements

Action

Required Role

Action

Required Role

Trigger lockout protection

Any user (automatic)

Unlock a temporarily locked account

Wait 30 minutes, or Admin/Owner

Unlock a permanently locked account

Admin, Owner


Quick Start Guide

For Users: If Your Account is Locked

  1. Wait 30 minutes — temporary locks expire automatically.

  2. Check your email for a lockout notification with guidance.

  3. When the lock expires, try logging in with the correct password.

  4. If you've forgotten your password, use the Forgot password? link.

⚠️ Warning: If you continue to enter incorrect passwords after unlocking, you may trigger a permanent lock.

For Admins: Unlocking a User's Account

  1. Navigate to People > Individuals from the sidebar.

  2. Search for the locked user.

  3. Click the three-dot menu (⋯) next to their name.

  4. Select Set password manually.

  5. Enter a new secure temporary password.

  6. Share the password securely with the user.

💡 Tip: Setting a new password automatically unlocks the account.


FAQs

Q: How many failed attempts trigger a lockout?
After 10 failed login attempts, the account is temporarily locked for 30 minutes.

Q: What's the difference between temporary and permanent lockout?
A temporary lockout lasts 30 minutes and unlocks automatically. A permanent lockout occurs if the account is locked twice within 24 hours and requires an Admin to manually reset the password.

Q: Will I be notified if my account is locked?
Yes. You'll receive an email notification when your account is locked. For permanent lockouts, your Admin/Owner is also notified.

Q: Can I unlock my own account?
For temporary lockouts, simply wait 30 minutes. For permanent lockouts, you'll need to contact your Admin.

Q: Does using "Forgot password" unlock my account?
Yes. If you reset your password via the "Forgot password" link, this will unlock your account once you set a new password.

Q: How can Admins tell if a user is locked out?
Admins receive email notifications for permanent lockouts. Users may also contact Admins directly if they can't log in.


Troubleshooting

Issue

Solution

Issue

Solution

Account temporarily locked

Wait 30 minutes for automatic unlock, then try again with the correct password.

Account permanently locked

Contact your Admin to have your password reset.

Locked out but don't know password

Use the "Forgot password?" link on the login screen after the 30-minute lockout expires.

Keep getting locked out

Ensure you're using the correct email/login name and password. Consider using a password manager.

Admin can't unlock account

Reset the user's password via People > Individuals — this automatically unlocks the account.