Too many failed sign-in attempts — complete the captcha and try again
Password login now requires captcha (failure threshold), but captcha was missing or failed verification (AUTH_RATE_LIMIT_LOGIN_CAPTCHA, often with needsCaptcha: true).
Why this happens
Captcha on login policy after N failures. Not a hard IP ban yet — solve the captcha and retry. Distinct from Too many failed attempts — your IP has been banned.
Diagnose and fix
1. Complete the captcha widget; submit email/password again.
2. Admin: ensure captcha keys work (Captcha provider / Captcha on login).
3. If the widget never appears, see captcha-not-configured siblings from earlier phases.
4. After many more failures, IP ban may still apply.