When you exceed the number of failed passwords and get locked out of the user authentication it does not tell you that you’ve been locked out nor does it tell you to wait the allotted time period. It just keeps telling you that you are trying an invalid username/password.
This would be a good idea for the ideas portal.
We do not tell the user who is attempting to login that the account associated with the username they provided is locked out for security reasons. Though we do log this information in the gateway logs - look for messages such as User 'admin' is locked out or User 'admin' is now locked out.