PIN Code Events
PIN code events capture brute-force detection on device PIN codes used to protect the local browser profile.
Event Types
| Event Type | UI Name | Description |
|---|
| pincodeExhaustion | PIN code bruteforce identified | Too many failed PIN code attempts were detected on a device, indicating a possible brute-force attack on the local browser profile |
Context Fields
| Field | UI Label | Description |
|---|
| pincode.failedAttempts | Failed attempts | The number of failed PIN code attempts that triggered the event |
| pincode.registrationTime | Registration time | When the PIN code was originally registered on the device |
How It Works
Prisma Browser uses a PIN code to protect the local browser profile on the device. If an attacker (or unauthorized user) attempts to brute-force the PIN code, the browser detects excessive failed attempts and generates a pincodeExhaustion event.
This event:
- Appears in the PIN Code category in the Events screen (separate from Access)
- Has severity Very High — it indicates a potential attack
- Does not have a policy action (the browser handles the lockout internally)
Examples
PIN Code Brute-Force Detected
| Field | Value |
|---|
| Type | PIN code bruteforce identified |
| Category | PIN Code |
| Time | 2026-07-06 06:45:00 UTC |
| User | mike.chen@acme.com |
| Failed attempts | 15 |
| Registration time | 2026-01-15 09:30:00 UTC |
| Severity | Very high |
| Device | ACME-LAPTOP-042 |
| OS | Windows 11 |
