If a user has too many consecutive failed attempts to login, the system will lock them out. (A lock icon will appear next to the name of the locked-out user.) A system administrator can unlock a user account by going to Setup > Security > Users.
Click Unlock.