Magento 2 Failed Login Lockout
description
Magenear Failed Login Lockout adds configurable lockout protection to Magento 2's admin and customer login forms, temporarily blocking further attempts after a set number of failures from the same account or IP address.
The module is designed for stores that want stronger brute-force protection than Magento's built-in throttling, without deploying a full WAF or third-party security suite.
- Configurable failed-attempt threshold before lockout
- Separate rules for admin and storefront customer logins
- Adjustable lockout duration with automatic unlock
- Email alert to store admins on repeated failures
- IP-based and account-based tracking
- Manual unlock option from the admin panel
- Lightweight Magento-native implementation without unnecessary complexity
Magenear Failed Login Lockout reduces the risk of credential-stuffing and brute-force attacks reaching your storefront or admin panel, closing a common gap in default Magento security.
Reviews
Write Your Own Review