Timeline for Why do sites implement locking after three failed password attempts?
Current License: CC BY-SA 2.5
2 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| May 22, 2011 at 22:44 | comment | added | Dominique | I think the arbritrary nature of using '3' as the max number of attempts has been answered by most of the previous posters already, but I did want to second AmaDaden's DoS scenario. It is a relatively low-tech attack and could cause a great deal of damage business-wise, especially if a website does not have enough back-up resources to deal with it. | |
| Nov 19, 2010 at 14:36 | history | answered | AmaDaden | CC BY-SA 2.5 |