IT4S 2.12.4: release notes
- Safer sign-in: authenticator codes work only once, after ten failed attempts password sign-in pauses for 15 minutes
- a new password or second factor signs out all other devices
- sessions last at most 90 days
- passwords with at least 12 characters