Patent ID: 9077703
Filing Date: 2015-07-07
Classification: G06F,H04L

Abstract:
1. A computer-implemented method for protecting user accounts, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising: identifying a credential that a client device uses to log in to a user account of an online system, where the online system is configured to perform an adverse security action in response to a number of failed attempts to log in to the user account; determining that an old version of the credential is no longer valid for logging in to the user account and that a new version of the credential is required to log in to the user account; taking, by the computing device, a remedial action that prevents the adverse security action in response to determining that the old version of the credential is no longer valid, wherein taking the remedial action that prevents the adverse security action comprises preventing, by the computing device, the client device from attempting to log in to the user account using the old version of the credential.