Block Logins After Multiple Failed Attempts in 2.14Scott O'Reilly, Jun 13, 2016There is new configuration option in the Administration section where you can choose the number if invalid attempts allowed before an account is locked.