Handling Account Lockout

This topic provides details to manage account lock out situation.

Overview

This document provides guidelines for handling situations where accounts are locked due to incorrect login attempts. It outlines the steps required to unlock accounts and provides instructions for managing multiple accounts under various scenarios.

General Lockout Policy

  • Lockout Threshold: Accounts will be locked automatically after 5 consecutive failed login attempts.
  • Purpose: This measure enhances security by preventing unauthorized access to accounts through brute-force attacks.

Scenario 1: Managing Locked Admin and User Accounts

Situation

If an account is locked (admin or user) due to multiple incorrect login attempts, but other admin accounts are active, follow these steps to unlock the locked account:
  1. Login with an active admin account:
    • Use the credentials of an admin account that is not locked.
  2. Access User Management:
    • Navigate to the User Management section under System Settings.
  3. Find and unlock the locked account:
    • Locate the locked account in the list of users.
    • Change the account status from "Locked" to "Unlocked".

Scenario 2: All Admin Accounts Locked

Situation

In a rare case where all admin accounts are locked due to multiple incorrect login attempts, follow these steps to regain access and unlock accounts:
  1. Restart the InformixHQ web application:
    • Restart the application to reset the lockout state for the admin account.
  2. Login with standard admin credentials:
    • Use the standard admin credentials to log in.
    • You will be prompted to set a new password upon first login after the restart.
  3. Set a new password:
    • Follow the prompts to create and confirm a new password.