Account Lockout Security Alerts and Recovery
Updated
Learn about account lockout security alerts, how to recover from account lockout, and essential account security features.
Account lockout
Entering incorrect passwords or two-factor authentication (2FA) codes repeatedly will temporarily lock your account. This lock applies not only to your account but also to the network address from which the attempts originated, meaning attempts from multiple devices will not bypass this security measure. Each subsequent failure extends the duration of the lock.
If you find yourself locked out, please wait for the time indicated on the screen before trying again. You can also reset your password. Administrators have the ability to modify the thresholds in ERP Settings > Security.
If you suspect unauthorised access to your account
- Change your password immediately. This action will sign you out of all other devices.
- Enable two-factor authentication if it is not already activated.
- Notify us or your administrator to allow for a review of the sign-in history.
Ending a session takes effect right away, rather than waiting for the token to expire.
Session length
Sessions expire after a specified duration, prompting you to sign in again. In lengthy editing sessions, ensure you save your work frequently to prevent any loss if a session concludes.
Understanding Account Security Features
Account security is essential for safeguarding sensitive information. Knowing how sessions, sign-in alerts, and account lockout operate can assist you in preserving the integrity of your accounts.
How Account Lockout Works
When several incorrect password attempts occur, the system initiates an account lockout. This functionality safeguards your account by temporarily suspending access after a specified number of failed attempts. The duration of the lockout lengthens with each additional failure, deterring repeated guessing attempts.
Considerations for Two-Factor Authentication
Two-factor authentication (2FA) provides an extra layer of security. When activated, users are required to enter not only their password but also a secondary form of verification, such as a code sent to their mobile device. This greatly diminishes the likelihood of unauthorised access, even if the password has been compromised.
Steps to Take If You Suspect Unauthorized Access
- Change Your Password: Update your password immediately to block any further access.
- Enable 2FA: Activate two-factor authentication if it is not already in place.
- Notify Administrators: Inform your administrator about the incident so they can investigate the sign-in history thoroughly.
These steps are crucial for all users of the system, especially for those managing sensitive data or operating in regulated sectors.