Will BOX lock a user if user enters wrong password multiple times during log in?

Hi ​@Iidabashi555 - are you referring to your managed user being locked on failed logins? or to a external collaborator (aka your client) being locked out of their account on failed logins?

👋 Hi ​@Iidabashi555, to follow up on Leon’s question, Box provides security controls for both managed users and external collaborators.

While Box does not automatically lock an account after multiple incorrect password attempts, it does offer a range of security controls that help admins monitor activity, strengthen security, reduce risk, and quickly respond to suspicious logins:

• Admins can enable failed login notifications, which send an alert after a configurable number (3 to 8) of unsuccessful login attempts.
  📌 Enterprise Settings: Security Tab > Signup and Login
• Failed login events are recorded in the User Activity Report for auditing and monitoring.
• Admins can require multi-factor authentication (MFA) for stronger account protection.
• Admins can manually set the user to “inactive” to block access if they suspect unauthorized login attempts.
• Box also supports exposed password detection, which can block access until a compromised password is updated.

For external collaborators, Box also does not automatically lock the account after repeated failed password attempts. However, admins can enforce strong passwords, require 2-step verification, and enable exposed password detection for external users as well.

📌 Enterprise Settings: Security Tab

• Multi-Factor Authentication
• Password Requirements

We currently have an open feature request in Box Pulse: Lock users out after x number of attempts to login. You may upvote this request and share additional feedback for future consideration. While this enhancement is not yet planned, your input helps our Product Team better understand user needs.

Thank you, and please let us know if there are any other questions we can assist with.