How to reset a locked Admin account in Magento 2

The Most Popular Extension Builder for Magento 2

With a big catalog of 234+ extensions for your online store

In Magento 2, it’s a common issue that hacker can abuse your security wall by attempting many easy-to-guess passwords consecutively. Consequently, your admin backend is locked due to many failed attempts and Magento 2 core will prevent admin users from continuing login.

magento2security

All login actions will be blocked for a certain period of time. If you’re using this Security extension, there will be a warning message sent to your email.

It’s not good news for both parties, unfortunately. To ensure the process of managing your backend timely, you can take advantage of launching some command lines which allows safe admin accounts to be able to log in back to the configuration as soon as possible. In order to have the authority performing Linux command-line operations, you must have the SSH access connecting to your server securely. This step requires permission from the server manager directly so this will be the end game for hackers, they can’t run command lines under your nose obviously.

Move forward to check out how to reset locked admin users, and bookmark them when you need this tutorial in a blink of an eye.

How to Reset a locked Admin account in Magento 2

Store owner can choose one of listed methods

Solution #1. Unlock in the backend
Solution #2. Using command lines

Solution #1. Unlock in the backend

On the assumption that you’re managing several admin accounts but only one or two are locked, this will be the most simple way that can be accomplished right in the backend.

Follow System > Locked Users to check all current locked users, choose the specific admin account you want to open the lock.

backend

Solution #2. Reset using command lines

In this solution, you are required to use the command lines according to the following 3 steps:

Step 1: Open your Magento 2 dir
Step 2: Running command lines.
Step 3: Check the result

Step 1: Open your Magento 2 dir

First, open your Magento 2 dir, this is the general format to reset an admin user. Note that you just can unlock one by one account manually.

php bin/magento admin:user:unlock {username}

Step 2: Running command lines.

To unlock a specific admin account, insert the name of that admin into the {username} variable , for example with an admin named sam, type this command line:

php bin/magento admin:user:unlock sam

Step 3: Check the result

A success message will be delivered at the interface if the entered data is valid.

unlocksuccess

If there was a mistake in typing the name of the admin, this message will inform:
```
Couldn't find the user account "sam"
```
You should check and retype that command line from Step 1 along with the precise admin name again.
In case the account is not locked from the start or it can’t be unlocked, this following message will appear

unlock

Reset a locked Admin account and more

To be amazed how protective and supportive your store can be guarded, you can try out to use this Security Solution:

Provide a Security Checklist that displays warnings of possible risks in admin and other data
Set a limited number of failed login attempts to prevent the store from break-in risks
Record all login history to track in the future
Provide file change detection to warn admins of suspected changes in important files
Set up Blacklist and Whitelist IPs easily in the backend

Discover Mageplaza Security extensions

The bottom line

Resetting a locked Admin account in Magento 2 is a common action that many stores have to take due to security problems. You can either fix it with the above guidelines, or use our Security extension for better protection. This modulecan prevent unwelcomed violation attacks right from the log in steps at the backend, send warning emails timely, archive all login actions and give you a proper checklist which outlines possible harmful factors for your security issues. To prevent email to spam box, enable SMTP here

Related Topics