Skip to content

How to Let a Locked-Out Customer Back In (Pro)

A real customer sometimes locks themselves out: a forgotten password tried five times, or a shared office network that a bot also uses. You do not have to make them wait out the hour.

The customer may not know their IP. On the Logs screen, search for the page they were on, or look for a run of Failed rows at the time they called. Show all under an IP lists everything from it.

The IP actions under a visitor in the log, including Lift lockout

Go to Advanced CAPTCHA → Firewall. The IP is listed under Locked Out Right Now.

Click Lift Lockout next to it.

Locked Out Right Now with Lift Lockout highlighted

The same action is on the Logs screen as Lift lockout, under the IP of any row while it is locked.

The IP leaves the list, and the customer can use every form again.

Locked Out Right Now after the lockout was lifted

Lift Lockout also clears the IP’s failure count and its smart mode suspicion, so the customer starts clean.

When the card-testing shield locks a customer out of checkout, it locks the IP and the billing email. Lift Lockout releases both. On the demo store, the same customer’s next checkout after the lift went straight through:

The order received page after the lockout was lifted

See How to Stop Card Testing.

If the customer always works from the same office, add that IP to the Trusted List on the Firewall. Trusted IPs are never challenged and never locked out.