Locked Account Page
Account lockout page stating the 15-minute duration, a password reset shortcut, and the reassurance that lockouts are never permanent.
Account lockout page stating the 15-minute duration, a password reset shortcut, and the reassurance that lockouts are never permanent.
The Application Collection unlocks the source for every Application block. All Access unlocks every Collection.
Already purchased? Log in
Locked Account Page is the temporary lockout state, the Acme lockup above a padlock icon, the heading Account temporarily locked, the duration stated in weight (15 minutes from the last attempt), a Reset your password instead button for the user who does not want to wait, the reassurance that a reset link arrives at the registered address within a minute, and a security note below the card: we lock accounts after repeated failures to protect you and the real account owner is never permanently locked out because a password reset always works. A not-you line links to security@acme.com.
The block is static; the 15-minute figure is the only number users need and it is the one most auth pages omit. The permanent-lockout reassurance is the line that stops the security-conscious user raising an urgent ticket.
Reach for this block as the full-page response to a lockout event, shown after your auth system exceeds the failed-attempt threshold. Wire the Reset button to your password reset flow and pass the obfuscated address to the confirmation step.
A natural flow around it on an Application Pro page:
Before
After
One strong use is the brute-force lockout page. Other variants:
Tip: state the lockout duration explicitly, an indefinite lock with no information is the fastest way to lose a legitimate user to a competitor.