Security/Auth trainer

Account Lockout

Practice failed-attempt thresholds, cooldowns, CAPTCHA or step-up checks, safe errors, unlock recovery, counters, logs, and abuse protection.