# Security measures proposal - User login brute force prevention, and more

**URL:** <https://meta.discourse.org/t/security-measures-proposal-user-login-brute-force-prevention-and-more/19023>\
**Category:** Feature\
**Created:** [August 19, 2014, 12:42am UTC](https://meta.discourse.org/t/security-measures-proposal-user-login-brute-force-prevention-and-more/19023 "2014-08-19T00:42:23Z")\
**Posts on this page:** 1\
**Showing post:** 14

<div class="post-metadata">

**Author:** ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)\
**Post date:** [September 25, 2014, 12:11am UTC](https://meta.discourse.org/t/security-measures-proposal-user-login-brute-force-prevention-and-more/19023/14 "2014-09-25T00:11:19Z")

</div>

Note: I just added an extra rate limit (will be backported to stable)

[https://github.com/discourse/discourse/commit/d53e01619fb3fd879fe85cd1679f1601e40aa009](https://github.com/discourse/discourse/commit/d53e01619fb3fd879fe85cd1679f1601e40aa009)

30 login attempts per hour, 6 per minute.

---

_[View the full topic](https://meta.discourse.org/t/security-measures-proposal-user-login-brute-force-prevention-and-more/19023)._