# Showing message when the user has locked themselves out from a client **URL:** \ **Category:** Ignition\ **Tags:** scripting, vision\ **Created:** [February 28, 2024, 7:57am UTC](https://forum.inductiveautomation.com/t/showing-message-when-the-user-has-locked-themselves-out-from-a-client/86489 "2024-02-28T07:57:01Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![Tan\_M](https://avatars.discourse-cdn.com/v4/letter/t/3be4f8/32.png) [@Tan\_M](https://forum.inductiveautomation.com/u/Tan_M)\ **Post date:** [February 28, 2024, 7:57am UTC](https://forum.inductiveautomation.com/t/showing-message-when-the-user-has-locked-themselves-out-from-a-client/86489/1 "2024-02-28T07:57:01Z")
Hello, Is there anyway in which I can show a message to a user to "Try again later" after they have inputted incorrect credentials multiple times and locked themselves out of the client application and then try to login again during when they are locked out. Thankyou. ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [February 28, 2024, 12:22pm UTC](https://forum.inductiveautomation.com/t/showing-message-when-the-user-has-locked-themselves-out-from-a-client/86489/2 "2024-02-28T12:22:32Z")
That is a security bad practice, as it "leaks" information--specifically that the username was valid. Authentication failures must deliver utterly bland rejections. ---
**Author:** ![Tan\_M](https://avatars.discourse-cdn.com/v4/letter/t/3be4f8/32.png) [@Tan\_M](https://forum.inductiveautomation.com/u/Tan_M)\ **Post date:** [April 22, 2024, 4:18am UTC](https://forum.inductiveautomation.com/t/showing-message-when-the-user-has-locked-themselves-out-from-a-client/86489/3 "2024-04-22T04:18:38Z")
Hello, I do not want to tell the user what part of the credentials were wrong. I just wanted to display to the user that they are in the lockout period and need to wait for x amount of time before they can try to log into the application again. Is there any way to achieve this? Thank you. ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [April 22, 2024, 12:13pm UTC](https://forum.inductiveautomation.com/t/showing-message-when-the-user-has-locked-themselves-out-from-a-client/86489/4 "2024-04-22T12:13:45Z")
> [@Tan\_M](#): > > I do not want to tell the user what part of the credentials were wrong. But what you are asking **does** do this. It indicates that the username was valid. An invalid username will never be locked out. ---
**Author:** ![michael.flagler](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/michael.flagler/32/26272_2.png) [@michael.flagler](https://forum.inductiveautomation.com/u/michael.flagler)\ **Post date:** [April 22, 2024, 1:50pm UTC](https://forum.inductiveautomation.com/t/showing-message-when-the-user-has-locked-themselves-out-from-a-client/86489/5 "2024-04-22T13:50:22Z")
Unless they're asking for the entire IP to be blacklisted for that period of time. That's not how Ignition currently works, but if it did, would be an even more secure method to prevent credential/password "spraying" rather than just locking out a specific user. ---
**Author:** ![Tan\_M](https://avatars.discourse-cdn.com/v4/letter/t/3be4f8/32.png) [@Tan\_M](https://forum.inductiveautomation.com/u/Tan_M)\ **Post date:** [April 24, 2024, 9:42am UTC](https://forum.inductiveautomation.com/t/showing-message-when-the-user-has-locked-themselves-out-from-a-client/86489/6 "2024-04-24T09:42:39Z")
I understood what you are trying to say. In case I wanted to alter the login failed message for my perspective/vision application, is there any provision to do so?