Getting started

1. Open Settings → Modules, find Security and click Enable (or Install on the Browse tab).
2. Click Configure and set:
   • Max Login Attempts — wrong passwords allowed before the account is locked. Default 10.
   • Lockout Duration (minutes) — how long the lock lasts. Default 1.
3. Save.

For most Indian stores, 5 attempts and 15 minutes is a sensible balance: it stops guessing but does not keep a shopper who forgot their password waiting long. They can always use Forgot password instead.