Block unverified login attempts
Using the enhanced security protection of our Attack Protection Policy, you can block login attempts from unverified users. Any user that attempts to log in with an email or mobile number identifier that hasn’t been confirmed is blocked.
This feature helps to ensure that only users that have intended to sign up or register and have properly verified their correct details are allowed to log into your site.
When an attempt is made and this feature is enabled, a login_unverified_identifier event type is emitted to inform you of the attempt.
Users that attempt to log in with an unverified identifier, receive a message similar to the following:
Unverified identifier account. To login, please verify your identifier with the email or the SMS that you received.
Users that attempt to log in with an unapproved identifier, receive a message similar to the following:
You cannot authenticate using {0}
Protect against unwanted logins
You can block login attempts from unverified users with a simple operation from your ReachFive Console. You can also specify which identifiers are even allowed to attempt a login in the first place.
Prerequisites
-
You must have access to the ReachFive Console.
-
You must have a Developer, Manager, or Administrator role.
