title: Lock out users after too many failed login attempts
body: <p>I'm looking for the most <strong>elegant way to lock a Django user account after several failed login attempts</strong>.</p>
  
  <p><strong>"What have I tried?"</strong>:</p>
  
  <p>I have looked unsuccessfully for similar questions on SO (If this question is a dup please, post a comment to delete this one).</p>
  
  <p>At the moment I'm looking for other developers' experiences. I would prefer not to talk about what I've tried in order to not condition the answers.</p>
  
  <p>As additional information, the app doesn't have UserProfile enabled (but, of course, I can enable it if it's worth it).</p>