Credentials are personal: every sign-in is recorded under your name.
After five failed attempts, sign-in is locked for fifteen minutes.