Secure Your Account Linux

Edit file /etc/security/faillock.conf

# vi /etc/security/faillock.conf

Add this options :

deny = 5
unlock_time = 3600
fail_interval = 600

For example, if you want to block a user after five failed attempts, and lock them out for one hour (3600 seconds), and count failed attempts as new if they occur within 10 minutes (600 seconds).

Restart Service

# systemctl restart systemd-logind.service

How to Look Status User

faillock --user <username>

How to unblock

faillock --reset --user <username>

After completing these steps, the faillock settings will be updated according to your modifications.