Rate limit on authentication requests

Hi,

We are receiving this message when we try to login.

Too Many Requests have been made. Please try again later.

Is there a limit per public IP address?

Thanks,
David

That is correct.

To prevent abuse of our services, a rate limit is implemented.

In this case, a single IP address is restricted to sending a maximum of 5 authentication requests every 30 minutes when the email authentication flow is used.

This approach helps to control the load on the system, prevent denial of service (DoS) attacks, and ensure fair usage across all users.

This limit does not apply to the Google and Apple authentication flows.

Reference →