Manual:$wgPasswordAttemptThrottle

Access: $wgPasswordAttemptThrottle
Limit password attempts per IP per address.
Introduced in version:	1.14.0 (r38886)
Removed in version:	still in use
Allowed values:	(array)
Default value:	array( 'count' => 5, 'seconds' => 300 )

Other settings: Alphabetical | By Function

Details

Limit password attempts to count attempts per seconds per IP per address.

Memcached must be enabled for this setting to work properly.

To disable, put the following in LocalSettings.php:

$wgPasswordAttemptThrottle = false;