System should block the login option for defined period of time, when user enter wrong local device PIN more than 3 attempts
In order to reduce the chance for brute forcing the local device PIN, system should lock temporary the login option after 3 wrong attempts.
Acceptance criteria
- when user enter more than 3 times wrong device PIN, then the system lock down the login option for 5 minutes
- when login option is locked, then the system shows in login popup message with reverse counter showing how much time is left until the user is able make the next login attempt.
Message : "3 incorrect attempts. Try again in xx:xx"
- when user enter more that 9 time wrong PIN, then system revoke the account for the device
Edited by Kalin Canov