5 wrong codes pause sign-in for 15 minutes. Every attempt is recorded.