# Security

Account lockouts, login history, and the full audit trail
Signed in as —

## Admin accounts

Five failed sign-ins lock an account for 2 minutes; repeated failures extend the lockout up to an hour. You can lift a lockout early below if it was a genuine mistake.

Username | Role | Failed attempts | Status | Last sign-in |
--- | --- | --- | --- | --- | ---
Loading…

## Recent login attempts

Last 25 attempts, successful and failed.

Loading…

## Audit log

Every publish, edit, delete and sign-in across the whole dashboard.

Loading…

## Session & password policy

- Sessions sign out automatically after 30 minutes of inactivity.
- Passwords must be at least 10 characters and mix upper/lowercase letters, numbers and a symbol.
- All admin traffic should be served over HTTPS; the session cookie is marked secure in production.