How to Change Account Lockout Threshold in Windows 11

Windows 11 includes a security feature called the Account lockout threshold. This feature locks your computer account after a certain number of failed password attempts. It is designed to stop hackers from guessing your password through brute-force attacks.

Why use this setting?

By default, Windows locks an account after 10 failed login attempts. This protects your data if someone tries to guess your password repeatedly. You can change this number to make your computer more or less strict.

What happens when done?

Once you save your changes, Windows will track how many times a user enters the wrong password. If they hit your chosen limit, the account will lock for a set period of time.

How to change the Account Lockout Threshold

You can adjust this setting using the Group Policy Editor. Note: This requires admin privileges.

1. Open Local Group Policy Editor by searching for “Edit group policy” in your Start menu.

2. In the left sidebar, follow this path: Computer Configuration > Windows Settings > Security Settings > Account Lockout Policy.
3. On the right side, double-click on Account lockout threshold.

4. Enter the number of failed attempts you want to allow before the account locks.
5. Click OK and close the window.

Change the threshold using Windows Terminal

You can also use the command line. Note: This requires admin privileges.

1. Open Windows Terminal as an administrator by choosing Windows PowerShell or Command Prompt.

2. Type the following command and press Enter:

net accounts /lockoutthreshold:<number>

Replace <number> with your preferred amount of failed attempts.

Summary

The Account lockout threshold is a security tool that prevents unauthorized access by locking accounts after failed login attempts. You can easily manage this setting through the Local Group Policy Editor or by using a simple command in the Windows Terminal. Adjusting this helps you balance your own convenience with the security of your computer.