Auth0 brute-force protection triggers and blocks a user after repeated failed login attempts, resulting in an error message. Administrators can resolve this by unblocking the user directly from the Auth0 Dashboard. The exact error message is:

Your account has been blocked after multiple consecutive login attempts.

• Auth0
• Brute-force protection
• User Management

Auth0 brute-force protection blocks the user account after multiple consecutive failed login attempts to prevent unauthorized access.

How is a blocked user account unblocked in Auth0?

Review the following video to learn how Auth0 brute-force protection functions and how administrators can unblock affected users.

Administrators and users can resolve the block by using an email unblock link, resetting the password, using the Management API, or adjusting the login threshold.

• The affected user selects the unblock link in the email notification, if configured. Customize the template by reviewing the Customize Blocked Account Emails documentation.
• The affected user changes the password on all linked accounts.
• An administrator removes the block using the Management API via the Delete User Blocks endpoint to unblock a user.
• An administrator raises the Maximum Attempts login threshold.

Administrators can Unblock a User via the Auth0 Dashboard

Unblock the user account from the Auth0 Dashboard by navigating to the user profile and selecting the unblock action.

1. Navigate to User Management and select Users.
2. Select the name of the blocked user.
3. Select the Actions dropdown menu and choose Unblock for all IPs.

NOTE: The Unblock for all IPs option requires one of two roles: "editor-users" or "admin". If the option is not visible, the current account lacks the necessary permissions to view or modify roles. Contact an administrator or an account with the required role to perform this action.

Related References

• Delete User Blocks endpoint
• Unblock a user
• Customize Blocked Account Emails
• Brute-Force Protection