Authorization attempts amount

Is it possible to customize amount of the available login attempts ? Some people make mistakes so I need to make sure that in this case person got a chance for a few additional attempts. From another side I need to make sure that amount of this attempts will be limited, to avoid any kind of attack.