> For the complete documentation index, see [llms.txt](https://docs.couchdrop.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.couchdrop.io/administration/security/account-lockout.md).

# Account Lockout

SFTP and SCP are easy targets for brute force attacks on the internet. To protect our customers from unauthorised access, Couchdrop implements an account lockout policy by default. 

After 5 incorrect attempts in 5 minutes, accounts are locked for 15 minutes. 

This option can be disabled globally, but we do not recommend it. 

<figure><img src="/files/SZOl4ljKjEHDX1CH05nt" alt=""><figcaption></figcaption></figure>