NotableAccount access and securityAugust 1, 2026
Admin password sign-in now has stronger abuse protection
Password sign-in now combines durable attempt protection, private failure responses, and a consistent current password-hashing policy.
All studios
What changed
What changed
- Admin password sign-in now applies durable repeated-attempt protection across distributed StudioDock application instances.
- Known, unknown, passwordless, and temporarily limited accounts return the same private sign-in failure response.
- Password verification now follows one current hashing policy, while a valid older hash is upgraded safely after sign-in.
What changed
Why this matters
- Automated password guessing is constrained before protected account data is accessed.
- Sign-in failures do not disclose whether an administrator account exists.
- Existing studio administrators keep their normal sign-in flow while older password records move forward automatically.