If you suspect a user account is at risk, such as when the password has been reported compromised and the user has not changed it, as an administrator, you can temporarily disable access for that specific user.
Simply navigate to the Users panel and click the status “ACTIVE” once.
The user account will remain with all its data, but no one will be able to log in.