Login with Customer Account Lockout After Failed Attempts
HighBaselinedCriticalNegative
Description
Verify that account gets locked after 5 consecutive failed login attempts for security.
Pre-Conditions
1. User has a registered customer account 2. Account is not currently locked 3. Application is accessible
Test Steps
| Step # | Step Action | Expected Results |
|---|---|---|
| 1 | Navigate to the login page | Login page is displayed |
| 2 | Enter valid email: customer@test.com | Email is entered |
| 3 | Enter wrong password: Wrong1 and click Sign In | Error: "Invalid email or password" (Attempt 1) |
| 4 | Enter wrong password: Wrong2 and click Sign In | Error: "Invalid email or password" (Attempt 2) |
| 5 | Enter wrong password: Wrong3 and click Sign In | Error: "Invalid email or password" (Attempt 3) |
| 6 | Enter wrong password: Wrong4 and click Sign In | Warning: "1 attempt remaining before account lockout" |
| 7 | Enter wrong password: Wrong5 and click Sign In | Account locked message: "Account locked due to multiple failed attempts. Please try again in 30 minutes or reset your password" |
Created Dec 17, 2025 by Demo User