Manual:$wgPasswordAttemptThrottle

Access: $wgPasswordAttemptThrottle
Limit password attempts per IP per address.
Introduced in version:	1.14.0 (r38886)
Removed in version:	still in use
Allowed values:	(array)
Default value:	array( 'count' => 5, 'seconds' => 300 )

Other settings: Alphabetical | By Function

Details

Limit password attempts to count attempts per seconds per IP per username.

$wgMainCacheType must be set to something other than CACHE_NONE for this setting to work.

To disable, put the following in LocalSettings.php:

$wgPasswordAttemptThrottle = false;