Is There a Permanent Lockout for Accounts that have Been Locked 10 Times in a Row
Nov 29, 2023
Okta Identity Engine
Administration
Overview
Applies To
- Password Policies
- User Lockouts
- Self Service reset
Solution
In Okta, a permanent lockout by entering the password a certain number of times does not exist. The length of a user's lockout is established based on the password policy and can be set up to a maximum of 9999 minutes. Once an administrator has cleared a user's locked-out status or it has expired, their incorrect password counter will reset, and the user can log in normally. There is no predetermined number of lockouts that result in permanent lockout; however, entering the recovery factors wrongly multiple times in a row(usually 5) can set the user's account to a suspended state, needing the reactivation from an admin via the Okta admin dashboard.
