Question

Would it be possible to have Devise timeout for say 10 minutes if you enter a password wrong 10 times? With timeout I mean it will not be possible to enter a new password for period X and getting a message stating you have to wait.

Answer 1

1. add :lockable strategy to your model
2. add config.unlock_strategy = :time
3. add config.lock_strategy = :failed_attempts
4. add config.maximum_attempts = 10
5. add config.unlock_in = 10.minutes to initializers/devise.rb