Introduction
If your HashiCorp Terraform Cloud (TFC) account becomes locked after multiple unsuccessful login or MFA attempts, you will not be able to access your account, even if you later enter the correct credentials.
This guide explains the methods you can use to unlock your account and regain access.
Why Accounts Get Locked
Your account may become locked if:
You enter an incorrect password multiple times.
You enter an incorrect MFA code repeatedly.
Automated security mechanisms detect suspicious sign-in behavior.
When this happens, TFC will block login attempts and continue to show “Invalid login or password”—even if you start entering the correct credentials.
Prerequisites
Before attempting to unlock your account, make sure that:
You have access to the email inbox associated with your HashiCorp account.
You are signing in to the correct HashiCorp platform:
Terraform Cloud: https://app.terraform.io/sessionYou know your correct account credentials (email and password) after the account has been unlocked.
Unlock Email Notification
When your account is locked, you will receive an email with the subject similar to:
Your account has been locked due to an excessive number of unsuccessful sign-in attempts.
Click the link below to unlock your account:
"Unlock my account"
To unlock your account:
Go to your email inbox.
Open the lock notification email.
Click “Unlock my account.”
Important:
Your account will not unlock on its own, and entering the correct password will still fail until you click the unlock link.
Alternative Method: Reset Your Password
If you cannot find the unlock email or prefer a different route, you can also use the Forgot Password process:
Go to the TFC login page.
Click “Forgot Password?”
Check your email for a password reset link.
Set a new password and log in again.
Completing a password reset also unlocks your account.
Summary
Multiple failed login or MFA attempts will lock your TFC account.
The account stays locked until you click the unlock link emailed to you.
Using Forgot Password is an alternate method that both resets and unlocks your account.