Accounts lock after too many wrong passwords. They unlock by themselves after an hour, or use the emailed link.