What is site/accounts/.logins?

Hi there,

I’m trying to set up a deploy- and backup-process for a few projects. I noticed that the file site/accounts/.logins changes sometimes. Most of the time it’s an empty array, sometimes there’s a entry with time and id. (looks like a JSON)

My first thought was that it’s maybe a list of active sessions, but even while I’m logged in, the file doesn’t change.

Is this a crucial file, or could I ignore it? Unfortunately I can’t find it documented anywhere.

Thank you,

It saves the number of failed login attempts to prevent brute force attacks.

1 Like


introduced in kirby 2.2.0

  • Brute-force protection for the login screen

Aaah, thanks! I can work with that :wink: