url-max-password-attempts

url-max-password-attempts is a variable defined in `url-vars.el'.
Its value is

5

Documentation:
Maximum number of times a password will be prompted for.
Applies when a protected document is denied by the server.

You can customize this variable.