Webfaze slows down and blocks repeated failed sign-ins to stop password guessing. Here's what each message means.

"Too many attempts. Wait a few minutes and try again."

Several sign-ins failed from your connection or for your account. Wait a few minutes, then sign in carefully. If you've forgotten the password, use Forgot your password? instead of guessing.

"Too many failed attempts. This address has been blocked."

Your internet address reached the limit set under Security → Blocking. The block lasts as long as Blocked for (minutes) says there.

To get back in sooner:

  • Another administrator can open Security and unblock the address, or press Unblock everything. The address they're signed in from is never blocked.
  • From the server, in the folder with webfaze.cjs and with the same data folder and database settings as the site: node webfaze.cjs unban --all, or node webfaze.cjs unban 203.0.113.7 for one address. Run node webfaze.cjs unban alone to list blocked addresses.
  • Or wait, or try from a different connection (for example your phone's mobile data).

Adjust the limits under Security → Blocking:

  • Failures allowed in an hour: at least 3, so people who simply mistype aren't blocked.
  • Blocked for (minutes): 0 means until someone lifts it by hand.

Visitors seeing limits

  • Forms: "Too many messages from your connection. Please try again later."
  • Bookings: "Too many bookings from your connection in the last hour."

These protect your inbox and calendar from floods, and reset by themselves after a while.