control center
Five wrong tries locks this out for fifteen minutes. There is no reset link — recovery is over SSH.