| "Too many failed attempts" on sign-in | Wait for the lockout time, or use Forgot password. |
| I locked myself out of the admin | Wait for the lockout time. If you've forgotten the password, use Forgot password on the admin sign-in page. |
| Customers get locked out too easily | Raise Max Login Attempts or lower Lockout Duration. |
| A blocked IP can still use the store | Known gap: the block list is not enforced yet. |
| Rate Limits tab numbers look wrong | They are sample figures, not live settings. |
| I can't see Settings → Security | Turn the module on and check you have the View security permission. |
