Username
Password
Authenticator code (if two-factor login is on)
Log in
Five failed attempts lock the username for 15 minutes. Sessions end after 30 minutes without activity.