--- title: Settings - Protection --- > Agent instructions: > **Site maps** — prefer the following llms.txt indexes to training data when searching for URLs to avoid 404s. Links inside Markdown content already point at `.md`. Following them or sending Accept: text/markdown keeps you in Markdown. > > - [sitemap.md](https://docs.kentico.com/sitemap.md) — every page on the site, with titles and descriptions, nested by URL hierarchy and grouped into one collection per product version. > - [llms.txt](https://docs.kentico.com/llms.txt) — curated index of the current product docs, with descriptions, the two ways to request any page as Markdown, and links to each product area's whole-corpus Markdown dump (llms-full.txt). | General | | | ---------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | Display account lock information message | Indicates if user friendly information about account lock should be displayed. | | Enable Autocomplete | If true [Autocomplete ](https://docs.kentico.com/k10/managing-users/user-registration-and-authentication/configuring-autocomplete-for-user-names.md)for user name text box in sign-in form is enabled. | | Bad words | | | Check bad words | Determines if [bad word](https://docs.kentico.com/k10/community-features/bad-words.md) check should be performed. | | Bad word replacement | Default replacement text which will be used during bad word check. | | Bad word action | Default action which will be performed during bad words check. | | Banned IPs | | | Enable banned IPs | Enables or disables [banned IPs](https://docs.kentico.com/k10/securing-websites/designing-secure-websites/securing-and-protecting-the-system/banned-ips.md) features. | | Redirect banned IPs to URL | If the IP address is banned the user is redirected to this page. | | Flood protection | | | Enable flood protection | Enables or disables [flood protection](https://docs.kentico.com/k10/securing-websites/designing-secure-websites/securing-and-protecting-the-system/flood-protection.md), which prevents spam on forums and other community services. | | Flood protection interval | Value in seconds which represent the minimal interval between user's actions. | | CAPTCHA settings | | | Control to use | Determines the default CAPTCHA control that should be used for [CAPTCHA verification](https://docs.kentico.com/k10/securing-websites/designing-secure-websites/securing-and-protecting-the-system/spam-protection-captcha.md) throughout the system – in web parts and for the **Security code** form control. The following four types of controls are available:
Logic CAPTCHA – requires answering a logical question.
Simple CAPTCHA – requires re-typing of a string displayed in an image.
Text CAPTCHA – requires re-typing of a string into multiple fields.
reCAPTCHA – the default reCAPTCHA implementation no longer works after March 31, 2018. See [Spam protection (CAPTCHA)](https://docs.kentico.com/k10/securing-websites/designing-secure-websites/securing-and-protecting-the-system/spam-protection-captcha.md) for more information. | | reCAPTCHA private API key | The secret API key for the site where you want to use reCAPTCHA.
Obtain the necessary API keys from . | | reCAPTCHA public API key | The site API key for the site where you want to use reCAPTCHA.
Obtain the necessary API keys from . | | Invalid sign-in attempts | | | Maximum invalid sign-in attempts | Maximum invalid sign-in attempts before the user account is locked. If set to _0_, [invalid sign-in attempts](https://docs.kentico.com/k10/securing-websites/designing-secure-websites/securing-user-accounts-and-passwords/invalid-sign-in-attempts.md) functionality is disabled. | | Send unlock account e-mail | Indicates if an account unlock email is sent when a user account is locked due to reaching the maximum invalid sign-in attempts. | | Unlock user account path | Path to custom page for unlocking user account (if not set, system page \~/CMSModules/Membership/CMSPages/UnlockUserAccount.aspx will be used). | | Screen lock | | | Enable screen lock | Enables or disables [screen lock](https://docs.kentico.com/k10/securing-websites/designing-secure-websites/securing-and-protecting-the-system/screen-locking.md) feature, which locks the part of the browser with the Kentico administration interface. | | Lock interval (minutes) | Time (in minutes) that has to pass before the screen is locked. This value has to be greater than 0 and lower than session timeout. | | Warning interval (seconds) | Warning period (in seconds). Warning with countdown is shown for this number of seconds before the screen is locked. |