> The delay is important for increasing security, but then why not have it after the check? It really isn't on a local machine, when the keyboard is used to en

> The delay is important for increasing security, but then why not have it after the check? It really isn't on a local machine, when the keyboard is used to enter the password manually. There should be zero delay. 0 ms. That'd be acceptable. And some system can be configured to "no delay" before successive password attempts. If one really believes adding a delay locally helps, the only thing that makes sense is introducing a delay after several broken attempts (like, say, five attempts: 10 seconds delay). But security theatre by having a 3 second delay between two login attempts is ridiculous.