5 failed attempts locks login for 15 minutes.