> ## Documentation Index
> Fetch the complete documentation index at: https://anaconda.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Enabling brute force protection

Keycloak provides a number of mechanisms to help secure your Workbench from identity-based attacks. A brute force attack is a method in which an attacker guesses your password by repeated guessing. To protect your installation against such attacks, follow these steps:

1. [Log in to your Keycloak administrative console](https://anaconda.com/docs/data-science/latest/admin/user-mgmt/users.md#creating-and-configuring-users).
2. Select **Realm Settings** from the left-hand navigation menu.
3. Select the **Security Defenses** tab.
4. Select the **Brute Force Detection** tab.
5. Toggle **Enabled** to `ON`.
6. Set the parameters for your organization’s brute force defenses. Hover your mouse over the  question mark to see what each parameter manages.
7. Click **Save**.

![Brute Force Protection Settings](https://mintcdn.com/anaconda-29683c67/0kagid79s86ffPpz/images/data-science/kc_brute_force_enable.png?fit=max\&auto=format\&n=0kagid79s86ffPpz\&q=85\&s=dd8288354e8955a9288e92e11ee3669f)

To disable these settings at any time, return to the **Brute Force Detection** tab and toggle **Enabled** to `OFF`.

## Other security mitigations

For more information about brute force protection and using Keycloak to mitigate other security threats, please see [Keycloak’s official documentation](https://www.keycloak.org/docs/latest/server_admin/#mitigating_security_threats).