A lockout after repeated wrong passwords protects the account, not punishes you. Here's how long it lasts and the quickest way back in.

What causes a lock

ClinyPal locks an account to stop someone guessing their way in. Two things trigger it:

Reset the password instead of waiting. Forgot password ends the lockout as soon as the new password is set.
  • Five wrong passwords within 15 minutes. Wrong attempts more than 15 minutes apart don't add up.
  • Three wrong sign-in codes on the emailed-code page. After the second you're warned you have one more try.

The first lock lasts 1 hour. If the account is locked again later, the lock lasts 2 hours, then 3, then 4 at most. A successful sign-in resets that count, so the next lock after a good sign-in is back to 1 hour. While locked, every sign-in attempt, even with the correct password, answers Your account is temporarily locked. Try again at 2:45 PM, in your location's time.

Separately, if a network sends 20 failed attempts in 15 minutes across any accounts, every sign-in from that network answers Too many login attempts. Please try again later. for 15 minutes. On a clinic network that usually means several people mistyping at once, or one person retrying hard.

Get back in

  • Wait until the time shown, then sign in. Nothing else is needed. There's no button for an administrator to lift the lock early.
  • If you're not sure of the password, reset it. A locked account can still use Forgot password?, and signing in with the new password clears the lock.
  • Sign in with a passkey if you've added one. A passkey doesn't go through the password check, so the lock doesn't stop it. Google and Microsoft sign-in are held by the lock the same way a password is.

If you keep getting locked while sure of your password, something is retrying on your behalf: a saved password in a browser or password manager that's out of date, or a tablet at the front desk still trying an old password. Update or remove the saved password there.

A lock you didn't cause

Treat it as someone trying your email. If you find your account locked without having tried to sign in, someone else has been entering passwords for your email. They didn't get in, or the lock wouldn't be there. Once the lock lifts, change your password, and turn on two-factor authentication so a guessed password is no longer enough. An administrator can see failed sign-ins for the clinic in the audit log.

Ending it early

Resetting your password with Forgot password also ends a lockout from wrong passwords, so once the new password is set you can sign in right away.