Hello,
So to understand Max Lockout you need to understand Lockout Time, And Extended Lockout.
If a user fails to login then the user gets Locked out for the Lockout Time that you specify, and if you notice the Lockout time is in minutes. So lockout time is expected to be a smaller duration as even a genuine user can end up entering wrong details and get locked out.
So what Max Lockout does it, it specifies for how many Lockouts the user should be given smaller Lockout time. If the user exceeds the Max Lockout then the user is pushed to Extended Lockout which is a larger time period which is in hours.
At last it’s up to you, you can even configure the Lockout time to be larger.
I hope is answers your query. You can even check out documentation https://loginizer.com/docs/configuration-and-settings/how-to-configure-brute-force-security/
Regards,
Loginizer Team