Aug 06. 2018 · by Helge Sverre

How to disable user lockout in Craft CMS

You can change the behaviour of user lockouts in CraftCms by changing the following settings in your config/general.php file, this might be useful to do in development.

config/general.php
PHP
// Add these 2 lines
'maxInvalidLogins' => 3,
'invalidLoginWindowDuration' => 'PT10S',

maxInvalidLogins
Specify how many invalid logins you can have within the invalidLoginWindowDuration before the account is locked, in the example above the time is set to 10 seconds, to disable user locking, set this value to false or 0, when you do, the invalidLoginWindowDuration option will no longer do anything.

config/general.php
PHP
'maxInvalidLogins' => false, // Disabled user locking

invalidLoginWindowDuration
This configuration option takes a PHP interval specification, you can read the documentation on how to format this string in the PHP documentation.