@ben Donβt know roundcube but have often thought that having to enter the same password twice would at least double the average amount of time to brute force a password π
@ben yes, all the time. It's a timing thing, I assume rc loads a cookie with the time on load and doesn't accept the login of its too old. Hitting reload before entering password means it works first time