After 5 failed password attempts, the account is locked until password reset or admin unlock.