Five failed attempts lock the account for 15 minutes. Sessions end after 15 minutes idle.

Data protection notice