# Unlock an account

> Unlock an account that was locked after repeated failed password attempts before the lock expires.

URL: https://erpdocs.corexlogic.com/en/yonetim/islemler/kilit-kaldirma

- **Type:** Task
- **Module:** Administration
- **Menu path:** Yönetim › Kullanıcı ve Roller › Kullanıcılar (Administration › Users and Roles › Users)
- **Screen route:** `/users`
- **Required permission:** `users.edit`
- **Prerequisites:**
  - The account is **Kilitli** (Locked) (15 minutes after 5 failed attempts).

A lock is an event and clears by itself; if waiting is not desired, an administrator removes it.

## Steps

1. On the **Yönetim › Kullanıcı ve Roller › Kullanıcılar** (Administration › Users and Roles › Users) screen, set the **Durum** (Status) filter to **Kilitli** (Locked). A yellow **Kilitli** badge appears next to the row in the list.
   <!-- action: navigate · target: "/users?durum=kilitli" -->
2. Select **Kilidi Kaldır** (Unlock) from the row's **İşlemler** (Actions) menu (the item appears only for a locked account).
   <!-- action: click · target: "Kilidi Kaldır" · expect: "The Kilit kaldırılsın mı? (Remove the lock?) window" -->
3. In the window, click **Kilidi kaldır** (Unlock).
   <!-- action: click · target: "Kilidi kaldır" -->

**Result:** The account can sign in immediately. The password does not change: if the user does not remember their password, the lock is set again — in that case, send a [password reset link](https://erpdocs.corexlogic.com/en/yonetim/islemler/sifre-sifirlama).

## What you need to know

- A user who tries to sign in with a locked account sees: "Hesap … başarısız giriş denemesi nedeniyle
  kilitlendi. … dakika sonra tekrar deneyebilir, beklemek istemiyorsanız yöneticinizden kilidi
  kaldırmasını ya da parola sıfırlama bağlantısı göndermesini isteyebilirsiniz." (The account was locked because of
  … failed sign-in attempts. You can try again in … minutes; if you do not want to wait, you can ask your administrator
  to remove the lock or to send a password reset link.)
- A lock is different from **devre dışı** (disabled): disabling is a decision and does not clear by itself.
- Lockouts appear in the **Erişim Günlüğü** (Access Log) with the **Hesap kilitlendi** (Account locked) and
  **Kilitliyken deneme** (Attempt while locked) events.
- To turn off locking for a person: **Kullanıcıyı Düzenle › Güvenlik › Hatalı şifre denemelerinde hesabı
  kilitle** (Edit User › Security › Lock the account on failed password attempts) (not recommended; "Kilitleme kapalı:
  şifre deneme sayısı sınırsız." — Locking off: unlimited password attempts.).
- On an account that is not locked: "Bu hesap kilitli değil." (This account is not locked.)

## Related

- [Users screen](https://erpdocs.corexlogic.com/en/yonetim/ekranlar/kullanicilar)
- [Monitoring screens](https://erpdocs.corexlogic.com/en/yonetim/ekranlar/izleme)
