The Failed Login Attempts page allows users to review unsuccessful login attempts made using their username or email address.
InstiKit records basic information about failed authentication requests to help users and administrators identify suspicious login activity while protecting sensitive information.
Purpose
Every unsuccessful login attempt is recorded whenever an invalid username, email address, or password is submitted.
This helps users:
- Detect unauthorized login attempts.
- Identify accidental login failures.
- Monitor suspicious activity on their account.
- Improve overall account security.
Recorded Information
For each failed login attempt, InstiKit stores information such as:
- Username or Email Address used
- IP Address
- Browser
- Operating System
- Date and Time
This information helps users identify where and when unsuccessful login attempts occurred.
What Is Not Stored?
For security reasons, InstiKit never stores the password entered during a failed login attempt.
Only metadata about the login request is recorded.
This ensures that sensitive credentials are never retained in login attempt logs.
Typical Uses
The Failed Login Attempts page can help you:
- Identify repeated login failures caused by typing mistakes.
- Detect attempts from unfamiliar devices or locations.
- Verify whether someone is trying to access your account.
- Investigate reported login issues.
Best Practices
If you notice failed login attempts that you do not recognize:
- Change your password immediately.
- Enable Two-Factor Authentication (2FA) if available.
- Review your account activity.
- Contact your system administrator if you believe your account is being targeted.
Frequently Asked Questions
Are successful logins shown here?
No. This page displays only unsuccessful login attempts.
Is my password stored after a failed login?
No. InstiKit never records or stores the password entered during a failed login attempt.
Why do I see failed login attempts that I don't remember?
This may happen if:
- You entered an incorrect password.
- Your browser autofilled an outdated password.
- Someone else attempted to access your account.
If the attempts appear suspicious, update your password and enable Two-Factor Authentication.
Related Documentation
- My Profile
- Security
- Change Password
- Two-Factor Authentication