diff --git a/maxkey-core/src/main/java/org/maxkey/persistence/repository/PasswordPolicyValidator.java b/maxkey-core/src/main/java/org/maxkey/persistence/repository/PasswordPolicyValidator.java
index f13439c7d..9d0721b60 100644
--- a/maxkey-core/src/main/java/org/maxkey/persistence/repository/PasswordPolicyValidator.java
+++ b/maxkey-core/src/main/java/org/maxkey/persistence/repository/PasswordPolicyValidator.java
@@ -292,7 +292,7 @@ public class PasswordPolicyValidator {
            userInfo.setBadPasswordCount(userInfo.getBadPasswordCount() + 1);
            setBadPasswordCount(userInfo.getId(),userInfo.getBadPasswordCount());
            PasswordPolicy passwordPolicy = passwordPolicyRepository.getPasswordPolicy();
-           if(userInfo.getBadPasswordCount() + 1 >= passwordPolicy.getAttempts()) {
+           if(userInfo.getBadPasswordCount() >= passwordPolicy.getAttempts()) {
         	   _logger.debug("Bad Password Count {} , Max Attempts {}",
         			   userInfo.getBadPasswordCount() + 1,passwordPolicy.getAttempts());
         	   this.lockUser(userInfo);