After 5 failed attempts from the same device/account pair, login is temporarily locked for 15 minutes.