Symptoms

Users are getting locked out of their accounts after only one unsuccessful password entry.

Release

all releases.

Cause

password_reset.request.max_attempt is set to 1.

Resolution

Set the property password_reset.request.max_attempt to 2 or more. Can also be located in Password Reset > Properties module.