Missing per account 2FA rate limit

[Nat]

Here is a feature request for Captcha.

CAPTCHA after X attempts

Is it possible to add the option of requiring reCAPTCHA to the Web Vault after X failed attempts (and if possible to the Desktop app and Browser Extension as well)? This feature would prevent brute-forcing attacks, since users are terrible at choosing their Master Password. A “strong” master password is usually only 40 bits entrophy (according to About your Secret Key | 1Password), even though the NIST recommends 80 bits. According to Bruce Schneier, a 40 bits key could be cracked in only 2 s…