A security configuration that automatically locks a user account after a specified number of failed login attempts, preventing brute force attacks and unauthorized access.