Account and Security
Login attempts and rate limits
What happens when you fail your password too many times.
Last updated
Brute force protection
Failed sign in attempts on the same username or from the same IP get throttled after a small number of tries. This makes it pointless to script password guesses against your account.
What you see
After too many failed attempts in a short window you get a Try again later message. The lock clears on its own in a few minutes.
If you locked yourself out
Wait a few minutes and try again with the correct password. If you genuinely forgot your password and have no 2FA recovery, message support on Telegram, but understand we cannot reset a password we do not have a recovery method for. This is why we tell every user to save their 2FA recovery secret.
Related articles
- Account and SecurityHow to change your usernamePick a new handle, lock in the new URL.
- Account and SecurityHow to change your display nameUpdate the big name that shows above your username.
- Account and SecurityHow to set up two factor authenticationAdd an authenticator app code to your sign in flow.
- Account and SecurityHow to change your emailShort answer. There's no email on Vaults.