> What prevents someone from securing the system by putting a limit on the number of login attempts Because, as I stated in another comment in this thread: Th

> What prevents someone from securing the system by putting a limit on the number of login attempts Because, as I stated in another comment in this thread: That is not how passwords are cracked in today's environment. In today's environment, someone obtains (via hacking or bribes) the internal password hash list, and then runs the list through a system such as this one: https://gist.github.com/epixoip/a83d38f412b4737e99bbef804a270c40 https://gist.github.com/epixoip/a83d38f412b4737e99bbef804a27... A "try limit" on the login page does nothing to slow this monster down.