Answer the question
In order to leave comments, you need to log in
Unusual Windows behavior on failed logons, how to explain?
With several unsuccessful logins under any account in a row , the system starts loading the profile 4-5 times further for a few seconds (as if the password was entered correctly, although in fact it was not) and then again writes that the password is incorrect.
I used to notice something similar behind the system, I thought that this was a built-in feature so that they would not spam with unsuccessful authorization, but as such I did not see an explanation for this on the Internet. So what is it, a feature or some kind of bug? (on many computers I have noticed this for more than a year)
Answer the question
In order to leave comments, you need to log in
Yes, this is a feature against password guessing.
In addition, there is also a policy for blocking an account after several unsuccessful login attempts (the number of attempts and blocking duration can be configured).
but as such, I have not seen an explanation of this on the InternetGoogling pretty fast:
...Another reason why invalid passwords take longer to reject is to reduce the effectiveness of dictionary attacks.
...The invalid password rejection time in some places can get quite high, especially if the delay escalates each time you get the password wrong. For example, after you type the third (fourth?) incorrect password to the Windows logon screen, it displays the incorrect password error for something like 30 seconds before letting you try again.
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question