The user may have reached the allowed number of login failures.
From the Embedded Web Server, click Settings > Security > Login Restrictions.
Update the lockout time and the allowed number of login failures.
Click Save.