System shall enable automatic account lock (length to be determined by admin) after a certain number of incorrect logins. User status gets updated to “suspended”. After administrator re-activates this user, an email/sms gets sent automatically to said user to reset his/her password.