---
title: Password Policy Max Login Attempts – Unlimited
description: "**Impact area** Security **Severity** Medium **Affected element** Profile Org Config ## Rule ID **SF-0179** ## Impact Allowing too many failed login attempts can open you up to brute force attacks. ## Remediation Limit the number of login failures allowed for…"
url: "https://community-staging.qualityclouds.com/qcdocs/qc/salesforce-rules/password-policy-max-login-attempts-unlimited/"
updated: "2025-03-21"
category: Rules
---

# Password Policy Max Login Attempts – Unlimited

**Impact area**

Security

**Severity**

Medium

**Affected element**

Profile

Org Config

## Rule ID

**SF-0179**

## Impact

Allowing too many failed login attempts can open you up to brute force attacks.

## Remediation

Limit the number of login failures allowed for a user before the user is locked out.

### Time to fix

30 min

## References

This rule is linked to [Common Weakness Enumeration CWE-521 Weak Password Requirements](https://cwe.mitre.org/data/definitions/521.html).