{
  "schema_version": 2,
  "id": "operate/rs/security/access-control/manage-users/login-lockout",
  "title": "Manage user login",
  "url": "https://redis.io/docs/latest/operate/rs/security/access-control/manage-users/login-lockout/",
  "summary": "Manage user login lockout and session timeout.",
  "tags": [
    "docs",
    "operate",
    "rs"
  ],
  "last_updated": "2026-10-01T15:48:36+01:00",
  "page_type": "content",
  "content_hash": "b9c1ed933798345ccbb7e60ed283096b356e3e945139fdd01f654aa3b355c2d8",
  "sections": [
    {
      "id": "overview",
      "title": "Overview",
      "role": "overview",
      "text": "Redis Software secures user access in a few different ways, including automatically:\n\n- Locking user accounts after a series of authentication failures (invalid passwords)\n\n- Signing sessions out after a period of inactivity\n\nHere, you learn how to configure the relevant settings."
    },
    {
      "id": "user-login-lockout",
      "title": "User login lockout",
      "role": "content",
      "text": "By default, after 5 failed login attempts within 15 minutes, the user account is locked for 30 minutes. You can change the user login lockout settings in the Cluster Manager UI or with [`rladmin`](https://redis.io/docs/latest/operate/rs/references/cli-utilities/rladmin)."
    },
    {
      "id": "view-login-lockout-settings",
      "title": "View login lockout settings",
      "role": "content",
      "text": "You can view the cluster's user login lockout settings from **Cluster > Security > Preferences > Lockout threshold** in the Cluster Manager UI or with [`rladmin info cluster`](https://redis.io/docs/latest/operate/rs/references/cli-utilities/rladmin/info#info-cluster):\n\n[code example]"
    },
    {
      "id": "configure-user-login-lockout",
      "title": "Configure user login lockout",
      "role": "configuration",
      "text": "To change the user login lockout settings using the Cluster Manager UI:\n\n1. Go to **Cluster > Security > Preferences**, then select **Edit**.\n\n1. In the **Lockout threshold** section, make sure the checkbox is selected.\n\n    ![The Lockout threshold configuration section](https://redis.io/docs/latest/images/rs/screenshots/cluster/security-preferences-lockout-threshold.png)\n\n1. Configure the following **Lockout threshold** settings:\n\n    1. **Log-in attempts until user is revoked** - The number of failed login attempts allowed before the user account is locked.\n\n    1. **Time between failed login attempts** in seconds, minutes, or hours - The amount of time during which failed login attempts are counted.\n\n    1. For **Unlock method**, select one of the following:\n\n        - **Locked duration** to set how long the user account is locked after excessive failed login attempts.\n\n        - **Only Admin can unlock the user by resetting the password**.\n\n1. Select **Save**."
    },
    {
      "id": "change-allowed-login-attempts",
      "title": "Change allowed login attempts",
      "role": "content",
      "text": "To change the number of failed login attempts allowed before the user account is locked, use one of the following methods:\n\n- [Cluster Manager UI](#configure-user-login-lockout)\n\n- [`rladmin tune cluster`](https://redis.io/docs/latest/operate/rs/references/cli-utilities/rladmin/tune#tune-cluster):\n\n    [code example]\n\n    For example, to set the lockout threshold to 10 failed login attempts, run:\n\n    [code example]\n\n    If you set the lockout threshold to 0, it turns off account lockout, and the cluster settings show `login_lockout_threshold: disabled`.\n\n    [code example]"
    },
    {
      "id": "change-time-before-login-attempts-reset",
      "title": "Change time before login attempts reset",
      "role": "content",
      "text": "To change the amount of time during which failed login attempts are counted, use one of the following methods:\n\n- [Cluster Manager UI](#configure-user-login-lockout)\n\n- [`rladmin tune cluster`](https://redis.io/docs/latest/operate/rs/references/cli-utilities/rladmin/tune#tune-cluster):\n\n    [code example]\n\n    For example, to set the lockout reset to 1 hour, run:\n\n    [code example]"
    },
    {
      "id": "change-login-lockout-duration",
      "title": "Change login lockout duration",
      "role": "content",
      "text": "To change the amount of time that the user account is locked after excessive failed login attempts, use one of the following methods:\n\n- [Cluster Manager UI](#configure-user-login-lockout)\n\n- [`rladmin tune cluster`](https://redis.io/docs/latest/operate/rs/references/cli-utilities/rladmin/tune#tune-cluster):\n\n    [code example]\n\n    For example, to set the lockout duration to 1 hour, run:\n\n    [code example]\n\n    If you set the lockout duration to 0, then the account can be unlocked only when an administrator changes the account's password.\n\n    [code example]\n\n    The cluster settings now show `login_lockout_duration: admin-release`."
    },
    {
      "id": "unlock-locked-user-accounts",
      "title": "Unlock locked user accounts",
      "role": "content",
      "text": "To unlock a locked user account as an admin, use one of the following methods:\n\n**Cluster Manager UI:**\n\nTo unlock a user account in the Cluster Manager UI:\n\n1. Go to **Access Control > Users**. Locked users have a \"User is locked out\" label:\n\n   ![The Access Control > Users configuration screen in the Cluster Manager UI](https://redis.io/docs/latest/images/rs/screenshots/access-control/7-22-updates/users-locked-out.png)\n\n1. Point to the \"User is locked out\" label, then click **Reset to unlock** when it appears:\n\n   ![Reset to unlock button appears when you point to a locked user in the list](https://redis.io/docs/latest/images/rs/screenshots/access-control/7-22-updates/users-reset-to-unlock.png)\n\n1. In the **Reset user password** dialog, enter a new password for the user:\n\n   ![Reset user password dialog](https://redis.io/docs/latest/images/rs/screenshots/access-control/users-reset-user-password-dialog.png)\n\n1. Select **Save** to reset the user's password and unlock their account.\n\n**rladmin:**\n\nTo unlock a user account or reset a user password with `rladmin`, run the [`rladmin cluster reset_password`](https://redis.io/docs/latest/operate/rs/references/cli-utilities/rladmin/cluster/reset_password) command:\n\n[code example]\n\n**REST API:**\n\nTo unlock a user account or reset a user password with the REST API, use [`PUT /v1/users`](https://redis.io/docs/latest/operate/rs/references/rest-api/requests/users#put-user):\n\n[code example]"
    },
    {
      "id": "turn-off-login-lockout",
      "title": "Turn off login lockout",
      "role": "content",
      "text": "To turn off user login lockout and allow unlimited login attempts, use one of the following methods:\n\n**Cluster Manager UI:**\n\nTo turn off user login lockout using the Cluster Manager UI:\n\n1. Go to **Cluster > Security > Preferences**, then select **Edit**.\n\n1. Clear the **Lockout threshold** checkbox.\n\n1. Select **Save**.\n\n**rladmin:**\n\nTo turn off user login lockout using `rladmin`, run the [`rladmin tune cluster`](https://redis.io/docs/latest/operate/rs/references/cli-utilities/rladmin/tune#tune-cluster) command:\n\n[code example]\n\n\n\nThe cluster settings show `login_lockout_threshold: disabled`."
    },
    {
      "id": "configure-session-timeout",
      "title": "Configure session timeout",
      "role": "configuration",
      "text": "The Redis Software Cluster Manager UI supports session timeouts. By default, users are automatically logged out after 15 minutes of inactivity.\n\nTo customize the session timeout, use one of the following methods:\n\n**Cluster Manager UI:**\n\nTo configure the session timeout using the Cluster Manager UI:\n\n1. Go to **Cluster > Security > Preferences**, then select **Edit**.\n\n1. For **Session timeout**, select minutes or hours from the list and enter the timeout value.\n\n1. Select **Save**.\n\n**rladmin:**\n\nTo configure the session timeout using `rladmin`, run the [`rladmin cluster config`](https://redis.io/docs/latest/operate/rs/references/cli-utilities/rladmin/cluster/config) command:\n\n[code example]\n\nThe `<number_of_min>` is the number of minutes after which sessions will time out."
    }
  ],
  "examples": [
    {
      "id": "view-login-lockout-settings-ex0",
      "language": "sh",
      "code": "$ rladmin info cluster | grep login_lockout\n    login_lockout_counter_reset_after: 900\n    login_lockout_duration: 1800\n    login_lockout_threshold: 5",
      "section_id": "view-login-lockout-settings"
    },
    {
      "id": "change-allowed-login-attempts-ex0",
      "language": "sh",
      "code": "rladmin tune cluster login_lockout_threshold <integer>",
      "section_id": "change-allowed-login-attempts"
    },
    {
      "id": "change-allowed-login-attempts-ex1",
      "language": "sh",
      "code": "rladmin tune cluster login_lockout_threshold 10",
      "section_id": "change-allowed-login-attempts"
    },
    {
      "id": "change-allowed-login-attempts-ex2",
      "language": "sh",
      "code": "rladmin tune cluster login_lockout_threshold 0",
      "section_id": "change-allowed-login-attempts"
    },
    {
      "id": "change-time-before-login-attempts-reset-ex0",
      "language": "sh",
      "code": "rladmin tune cluster login_lockout_counter_reset_after <seconds>",
      "section_id": "change-time-before-login-attempts-reset"
    },
    {
      "id": "change-time-before-login-attempts-reset-ex1",
      "language": "sh",
      "code": "rladmin tune cluster login_lockout_counter_reset_after 3600",
      "section_id": "change-time-before-login-attempts-reset"
    },
    {
      "id": "change-login-lockout-duration-ex0",
      "language": "sh",
      "code": "rladmin tune cluster login_lockout_duration <login_lockout_duration>",
      "section_id": "change-login-lockout-duration"
    },
    {
      "id": "change-login-lockout-duration-ex1",
      "language": "sh",
      "code": "rladmin tune cluster login_lockout_duration 3600",
      "section_id": "change-login-lockout-duration"
    },
    {
      "id": "change-login-lockout-duration-ex2",
      "language": "sh",
      "code": "rladmin tune cluster login_lockout_duration 0",
      "section_id": "change-login-lockout-duration"
    },
    {
      "id": "unlock-locked-user-accounts-ex0",
      "language": "sh",
      "code": "rladmin cluster reset_password <user_email>",
      "section_id": "unlock-locked-user-accounts"
    },
    {
      "id": "unlock-locked-user-accounts-ex1",
      "language": "sh",
      "code": "PUT /v1/users\n{\"password\": \"<new_password>\"}",
      "section_id": "unlock-locked-user-accounts"
    },
    {
      "id": "turn-off-login-lockout-ex0",
      "language": "sh",
      "code": "rladmin tune cluster login_lockout_threshold 0",
      "section_id": "turn-off-login-lockout"
    },
    {
      "id": "configure-session-timeout-ex0",
      "language": "sh",
      "code": "rladmin cluster config cm_session_timeout_minutes <number_of_min>",
      "section_id": "configure-session-timeout"
    }
  ]
}