Sessions last 12 hours and slide while you work. Five failed attempts locks the account for fifteen minutes.