A method for limiting access to a network based account, the method comprising: determining (S11) a type of a current service operation environment, in which a login service operation is being performed, wherein the type of the current service operation environment is a trustable environment or an untrustable environment, if the type of the current service operation environment is an untrustable environment: limiting (S12) a resource value of an exhaustible network resource of the login service operation within a first-grade resource value, updating the resource value in response to a login failure and when the updated resource value of the exhaustible network resource reaches the first-grade resource value, limiting any further login service operations from within the untrustable environment otherwise: limiting (S13) the resource value of the exhaustible network resource of the login service operation within a second-grade resource value, the second-grade resource value being larger than the first-grade resource value; updating the resource value in response to a login failure; and when the exhaustible network resource has been used up as indicated by the updated resource value reaching the second grade resource value and the current service operation environment is trustable, limiting any further login service operations, wherein the exhaustible network resource is incorrect password attempts and wherein the login service operation is a login service capable of achieving access to an account provided by a network service provider. determining (S11) a type of a current service operation environment, in which a login service operation is being performed, wherein the type of the current service operation environment is a trustable environment or an untrustable environment, if the type of the current service operation environment is an untrustable environment: limiting (S12) a resource value of an exhaustible network resource of the login service operation within a first-grade resource value, updating the resource value in response to a login failure and when the updated resource value of the exhaustible network resource reaches the first-grade resource value, limiting any further login service operations from within the untrustable environment limiting (S12) a resource value of an exhaustible network resource of the login service operation within a first-grade resource value, updating the resource value in response to a login failure and when the updated resource value of the exhaustible network resource reaches the first-grade resource value, limiting any further login service operations from within the untrustable environment otherwise: limiting (S13) the resource value of the exhaustible network resource of the login service operation within a second-grade resource value, the second-grade resource value being larger than the first-grade resource value; updating the resource value in response to a login failure; and when the exhaustible network resource has been used up as indicated by the updated resource value reaching the second grade resource value and the current service operation environment is trustable, limiting any further login service operations, limiting (S13) the resource value of the exhaustible network resource of the login service operation within a second-grade resource value, the second-grade resource value being larger than the first-grade resource value; updating the resource value in response to a login failure; and when the exhaustible network resource has been used up as indicated by the updated resource value reaching the second grade resource value and the current service operation environment is trustable, limiting any further login service operations, wherein the exhaustible network resource is incorrect password attempts and wherein the login service operation is a login service capable of achieving access to an account provided by a network service provider. <EOS>