Failed Sign-Ins and Lockouts

2 min read

What happens after wrong passwords, who is told, and how a blocked account is unlocked.

To protect accounts from password guessing, an account is locked for a short time after repeated wrong passwords, and blocked after too many.

Overview

This guide explains what happens after each wrong password, who is told, and how a blocked account is opened again.

Who Can Access

Agency AdminTeam MemberRemote MemberClient

What Happens After Wrong Passwords

Wrong passwordsWhat happens
1 and 2“Invalid credentials”, with the number of tries left
3Locked for 5 minutes
4Locked for 10 minutes
5Blocked until Clientish support unlocks it

This is how the message looks on the sign-in page:

Sign-in page showing Invalid credentials with 2 attempts remaining before lockout

A successful sign-in resets the count. A failed reCAPTCHA check doesn’t count as a wrong password.

Who Is Told

  • The person gets an email each time their account is locked or blocked.
  • You, the workspace owner, get an email when a client or team member in your workspace is locked out.
  • New device: you also get an email when your own account signs in from a new device and network.

Unlocking a Blocked Account

After a short lock, the person just waits and tries again. A blocked account (5 wrong passwords) can only be opened by Clientish support. Agencies can’t unlock accounts themselves, and a password reset doesn’t unlock it either.

  1. Contact Clientish support

    Open the profile menu, click Portal manage and open a support ticket, or contact us from our website. Tell us which email address is blocked.

  2. Sign in again

    Once we have unlocked it, the person signs in with their password, or resets it first if they are unsure of it. See Password Reset.

Tips & Best Practices

i

If someone isn’t sure of their password, have them reset it before the third try. That avoids the lock altogether.

Frequently Asked Questions

A client says they are blocked. What should I do?⌄
Contact Clientish support with the client’s email address. We unlock it; you can’t do it from your workspace.
Someone keeps trying wrong emails from one place.⌄
Repeated sign-ins with unknown emails from one internet address are blocked automatically. If that affects you, contact Clientish support.