Unlocking asp.net membership user

Question

I am using asp.net membership in my application. I have set maxInvalidPasswordAttempts="5" in web.config. User is locked out after 5 attempts. When does locked user get unlocked. Do I need to create a page to unlock users or it is done automatically after some hours/days ?

Please suggest.

Answer 1

By default, you'll need to create something to unlock the user. There's no automatic mechanism that unlocks users after a period of time.

Answer 2

I found the easiest, "less pain later" ways was to create a custom Membership provider that implements some sort of auto-unlock behavior. With this method, you're also able to provide a way for the user to configure the timeout period via the web.config file.

Stefan Schackow has an excellent tutorial available.