Account will be locked out, after this number of tries
Protect user accounts from hacking attempts by selecting a number in the drop-down to allow a set amount of incorrect login attempts before RB9 locks out the user.
You can unlock an account in the account’s User window. See Unlocking user accounts.
NOTE: Security requires lock-out
RB9 system preferences offer a Never Locked Out option. Unless you are using RB9 as a single user, we do not recommend this option as it is against general security rules for business applications to allow unlimited log-in attempts.
Password must meet complexity requirements
Click to select Yes to require strong passwords.
Enforce reset password periodically
Click to select Yes, then select a number of days in the Duration (days) for reset password to require RB9 users to change their password when the set amount of days has passed.
Allow same password as current
If you require users to change their password periodically, click to select Yes to allow them to keep using the same password when they update their password.
Use Email as Login Name
Click to select Yes to have RB9 set users’ login names to their email address. If it is set to No, users can change their login names.
OMTI does not allow for duplicate login names. If you select No and RB9 pops up a warning that there are duplicate names, click OK and in the Duplicate User panel, click 
> Change Login. Enter a new user name and save.
Use Two-Factor Authentication
Click to select Yes to require users to verify their identity upon RB9 sign-in with a second factor in addition to their user name and password. (You can also set up two-factor authentication (2FA) for RB Connect users. See Connect Login preferences.)
In RB9 & RB Connect, a verification code will be sent via the user’s preferred method of communication, which they must then enter into RB9/RB Connect before accessing the site. Authentication is per device, and users can decide to authenticate a device once or every time they sign in on that device. See Verifying your device.