Is this really the version you are looking for? Kentico Xperience 9 Documentation is no longer updated. Use the switcher in the header to choose your product version.
A user account can be locked for one of the following reasons:
The following text describes how you can provide users with means to unlock their accounts.
When an account is locked due to password expiration, the system asks the user to change their password in order to unlock the account. You can find more information in Password expiration.
Alternatively, administrators can extend the password's validity.
When an account is locked due to an exceeded number of , administrators can reset the invalid logon attempt counter manually:
To allow users to unlock their own accounts, you need to utilize unlock emails. You can set up the following options via the settings in Settings -> Security & Membership -> Protection:
Automatic email notification when the logon attempt limit is exceeded – enable the Send unlock account e****mail setting.
Messages that inform about locked accounts during logon and allow users to request an unlock email – enable the Display account lock information message setting.
Note: Displaying account lock information on logon is not recommended, because it can inform potential attackers that a user account with a given username exists and is locked.
The content of the emails is based on the Membership - User account locked email template. The template must contain a link to an account unlock page – to generate a valid URL of the unlock page for the email's recipient, use the {% UnlockAccountUrl %} macro.
By default, the unlock link targets the ~/CMSModules/Membership/CMSPages/UnlockUserAccount.aspx system page. If you wish to adjust the design or content of the account unlock page for your website, you can create a custom one:
The account unlock links generated in the emails (by the {% UnlockAccountUrl %} macro) now target your custom page.