Forgot Password API Receiving Excessive Requests Despite Brute-Force Protection Enabled

remus.ivan · January 12, 2026, 8:59pm

Welcome to the Auth0 Community!

Since there is an identical question under this thread - Forgot Password API Receiving Excessive Requests Despite Brute-Force Protection Enabled, we will continue the discussion there, but do not hesitate to step in with further questions if needed.

Thank you!
Kind regards,
Remus

Topic		Replies	Views
Forgot Password API Receiving Excessive Requests Despite Brute-Force Protection Enabled Get Help vulnerability-confidential-disclosure , security-compliance	2	27	January 12, 2026
Trying to unsuccessfully login 20 times doesn't throw too_many_attempts exception anymore? Get Help auth0 , too_many_attempts-no , brute-force	11	4939	April 13, 2021
Disable Brute Force Protection Get Help brute-force	3	3905	May 13, 2020
No limit for 'reset password' requests to Auth0 Get Help	1	3927	December 4, 2019
Captcha protection for password-reset (email flood) Product Feedback password-reset , forgot-password , captcha , bot-det , bot_detection	0	666	March 11, 2024