Settings - Protection

Display account lock information message

Indicates if user friendly information about account lock should be displayed.

Enable Autocomplete

If true Autocompletefor user name text box in sign-in form is enabled.

Check bad words

Determines if bad word check should be performed.

Bad word replacement

Default replacement text which will be used during bad word check.

Bad word action

Default action which will be performed during bad words check.

Enable banned IPs

Enables or disables banned IPs features.

Redirect banned IPs to URL

If the IP address is banned the user is redirected to this page.

Enable flood protection

Enables or disables flood protection, which prevents spam on forums and other community services.

Flood protection interval

Value in seconds which represent the minimal interval between user’s actions.

Control to use

Determines the default CAPTCHA control that should be used for CAPTCHA verification throughout the system – in web parts and for the Security code form control. The following four types of controls are available:

• Logic CAPTCHA – requires answering a logical question.
• Simple CAPTCHA – requires re-typing of a string displayed in an image.
• Text CAPTCHA – requires re-typing of a string into multiple fields.
• reCAPTCHA – the default reCAPTCHA implementation no longer works after March 31, 2018. See Spam protection (CAPTCHA) for more information.

reCAPTCHA private API key

The secret API key for the site where you want to use reCAPTCHA.

Obtain the necessary API keys from https://www.google.com/recaptcha/admin.

reCAPTCHA public API key

The site API key for the site where you want to use reCAPTCHA.

Obtain the necessary API keys from https://www.google.com/recaptcha/admin.

Maximum invalid sign-in attempts

Maximum invalid sign-in attempts before the user account is locked. If set to 0, invalid sign-in attempts functionality is disabled.

Send unlock account e-mail

Indicates if an account unlock email is sent when a user account is locked due to reaching the maximum invalid sign-in attempts.

Unlock user account path

Path to custom page for unlocking user account (if not set, system page ~/CMSModules/Membership/CMSPages/UnlockUserAccount.aspx will be used).

Enable screen lock

Enables or disables screen lock feature, which locks the part of the browser with the Kentico administration interface.

Lock interval (minutes)

Time (in minutes) that has to pass before the screen is locked. This value has to be greater than 0 and lower than session timeout.

Warning interval (seconds)

Warning period (in seconds). Warning with countdown is shown for this number of seconds before the screen is locked.