After 5 invalid login attempts, the user's account will be locked for 30 minutes. They will receive the following message: 'This account has been temporarily disabled due to too many invalid login attempts. Please try again in 30 minutes.'

Your account is locked out due to too many invalid login attempts. We can reset your password but you will need to wait for exactly 30 minutes before attempting to try and log in again.