Magento2 Customer Accounts Lockout Extension is an extension which enhances the customer authentication security on your website. When a customer fails after certain number of login attempts (maximum login attempts value set by admin) due to invalid password then that customer’s account will be locked for certain time period (lockout duration time in minutes set by admin).

After lockout if customer tries to login then he will be redirected to login page with error message that your account is locked please try again after 15 minutes (lockout duration time in minutes set by admin).

After installation, you can see link in admin menu “Lockout Users”. I have also added lockout functionality for admin accounts as well admin can enable/disable that feature when he wants but magento2 is already providing lockout functionality for admin accounts by default and I didn’t bypass that functionality instead wrote separate functionality for admin accounts lockout.

Features List

To enhance the user authentication security by lockout the customer account for certain duration.
Admin can unblock customer from backend grid.
Admin can enable/disable same lockout functionality for admin accounts as well.
Admin can export lockout accounts grid in CSV /excel sheet.
Benefits are to protect from the spam bot attacks and also slow down the online password guessing attacks.
Protect website from extra login attempts by using wrong credentials again and again.

Magento2 Installation Options

There are two ways of installation of extension in magento.

1. Magento 2 install extension using COMMAND LINE (Recommended)

Step 1: Download/purchase the extension
Step 2: Unzip the file(dev_lockout-1.0.0.zip) in a temporary directory from Magento2 folder
Step 3: Upload it to your Magento installation root directory
Step 4: Disable the cache under System > Cache Management
Step 5: Enter the following at the command line:
php bin/magento setup:upgrade
Step 6: After opening Stores > Configuration > Advanced > Advanced, the module will be shown in the admin panel

2. Magento2 install extension manually.

Step 1: Download/purchase the extension
Step 2: Unzip the file in a temporary directory
Step 3: Upload it to your Magento installation root directory
Step 4: Disable the cache under System > Cache Management
Step 5: Disable the cache under System >> Cache Management
Step 6 : After opening Stores > Configuration -> Advanced > Advanced, the module will be shown in the admin panel.

>> UPGRADING DATABASE If you need to upgrade the database, run the following command line:
php -f bin/magento setup:dbschema:upgrade

For showing lock icon on “Locked Users” menu link in admin panel, please run below command from command line:
php bin/magento -f setup:static-content:deploy