You can temporarily block login to Kintone, when password authentication failed continuously. This helps you prevent unauthorized logins from external third parties.

1. Click the gear-shaped menu button in the header.

2. Click Users & System Administration.

3. Click Login.

4. Select the number of failed login attempts before account lockout. A user can no longer log in to the service if the number of failed login attempts exceeds the value set here.
   For details on the default value of failed login attempts, refer to "Other default values".

5. Specify the time to unlock the locked-out account. If you set "Account lockout duration" (how long locked out accounts remain locked out) to "Never unlock", the account is locked out forever. In this case, Kintone Users & System Administrators should manually change the user's password.
   For the default value of account lockout duration, refer to "Other default values".

6. Click Save.

The following actions are counted as failed attempts:

• Failed to perform password authentication.
• Entered incorrect verification code.
  This action is counted only when the two-factor authentication has been enabled.

For example, if you have set the maximum number of failed login attempts to "10", the account will be locked out when either of the above-mentioned failed attempts reaches "10".

Number of failures will be reset when either of the following occurs.

• Logged in successfully.
• Changed the password.

To unlock the account, Kintone Users & System Administrators need to change the password of the user.

1. Click the gear-shaped menu button in the header.

2. Click Users & System Administration.

3. Click Departments & users.

4. In the search box, enter the display name or login name of the user to find the target user.
   You can also expand the department tree and select the target user.

5. Click the Change button.
   

6. Click Change password in the upper right of the screen.

7. Set a new password and then click Save and send via email or Change password.
   For details, refer to the following page:
   Changing user passwords

8. Inform the user that they can now log in using the new password.