How do I change the maximum number of invalid password attempts on my website? I went into the user accounts section and saw that it said you must change this in the web.config... I went onto the web.config and found the following line of code that I thought would be needed to change the maximum number of invalid password attempts:

maxInvalidPasswordAttempts="int"            The number of failed password attempts, or failed password answer attempts that are allowed before locking out a user?s account

This line of code can be found about 2/3 of the way down the web.config file. I'm confused by what is meant by int. How do I change the maximum number of invalid password attempts?  Similarly, how do I change the minimum password length?

A little after that line in the web.config file you'll find another line that looks like

<add name="AspNetSqlMembershipProvider" type="System.Web.Security.SqlMembershipProvider" connectionStringName="SiteSqlServer" enablePasswordRetrieval="true" enablePasswordReset="true" requiresQuestionAndAnswer="false" minRequiredPasswordLength="7" minRequiredNonalphanumericCharacters="0" requiresUniqueEmail="false" passwordFormat="Encrypted" applicationName="DotNetNuke" description="Stores and retrieves membership data from the local Microsoft SQL Server database" />

You would add the attribute there, ex:

<add name="AspNetSqlMembershipProvider" type="System.Web.Security.SqlMembershipProvider" connectionStringName="SiteSqlServer" maxInvalidPasswordAttempts="15" enablePasswordRetrieval="true" enablePasswordReset="true" requiresQuestionAndAnswer="false" minRequiredPasswordLength="7" minRequiredNonalphanumericCharacters="0" requiresUniqueEmail="false" passwordFormat="Encrypted" applicationName="DotNetNuke" description="Stores and retrieves membership data from the local Microsoft SQL Server database" />