# \#brute-force-protection **URL:** https://community.auth0.com/tag/brute-force-protection/1740.md [Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md) --- ## [Make all failed password attempts count toward lockout, and override brute-force IP behavior](https://community.auth0.com/t/make-all-failed-password-attempts-count-toward-lockout-and-override-brute-force-ip-behavior/201114)
**Author:** [@dfleming](https://community.auth0.com/u/dfleming)\ **Replies:** 5\ **Last updated:** [July 6, 2026, 2:21pm UTC](https://community.auth0.com/t/make-all-failed-password-attempts-count-toward-lockout-and-override-brute-force-ip-behavior/201114 "2026-07-06T14:21:35Z")
Hi all — hoping to confirm a couple of things about brute-force protection on a database connection (Username-Password-Authentication), with the password policy set to Excellent. Do submissions that fail the password … --- ## [Getting Authentication error "URL can be used only once' from the Brute-force blocked email](https://community.auth0.com/t/getting-authentication-error-url-can-be-used-only-once-from-the-brute-force-blocked-email/183093)
**Author:** [@naresh.seth](https://community.auth0.com/u/naresh.seth)\ **Replies:** 1\ **Last updated:** [March 31, 2025, 7:44pm UTC](https://community.auth0.com/t/getting-authentication-error-url-can-be-used-only-once-from-the-brute-force-blocked-email/183093 "2025-03-31T19:44:50Z")
There is Authentication Error “URL can be used only once”, while clicking the Blocked email received. This link works file, if i use gmail, but gives error, when i use outlook. Although, despite getting error “Authentica… --- ## [Limit OTP attempts in Form / Too Many Beats](https://community.auth0.com/t/limit-otp-attempts-in-form-too-many-beats/146233)
**Author:** [@jshewfelt](https://community.auth0.com/u/jshewfelt)\ **Replies:** 1\ **Last updated:** [January 17, 2025, 9:45pm UTC](https://community.auth0.com/t/limit-otp-attempts-in-form-too-many-beats/146233 "2025-01-17T21:45:05Z")
Is there a way to introduce a hard limit on the number of password attempts in the new Forms OTP flow? We would like a solution where after 10 incorrect OTP attempts the user is forced to send a new OTP to their email. I… --- ## [Not displayed 'Account Blocked' Message Immediately After Threshold is Reached](https://community.auth0.com/t/not-displayed-account-blocked-message-immediately-after-threshold-is-reached/162306)
**Author:** [@nirajan.kunwor](https://community.auth0.com/u/nirajan.kunwor)\ **Replies:** 1\ **Last updated:** [December 13, 2024, 6:40pm UTC](https://community.auth0.com/t/not-displayed-account-blocked-message-immediately-after-threshold-is-reached/162306 "2024-12-13T18:40:24Z")
I have configured the Brute Force Protection feature with a login threshold of 5 attempts. However, I’ve noticed an issue with the user experience. When a user reaches the login attempt limit, they receive an email to u… --- ## [Blocked user not getting email](https://community.auth0.com/t/blocked-user-not-getting-email/127206)
**Author:** [@abhishek5](https://community.auth0.com/u/abhishek5)\ **Replies:** 1\ **Last updated:** [February 13, 2024, 12:30pm UTC](https://community.auth0.com/t/blocked-user-not-getting-email/127206 "2024-02-13T12:30:33Z")
Hi , I have turned on brute for protection and have turned on the send notification toggle . Even after doing so , the user is not getting an email . I have checked in spam too . I checked the monitoring logs as well ,… --- ## [Unblock an IP address via the Auth0 UI, instead of the API](https://community.auth0.com/t/unblock-an-ip-address-via-the-auth0-ui-instead-of-the-api/122910)
**Author:** [@pavel-tpt](https://community.auth0.com/u/pavel-tpt)\ **Replies:** 1\ **Last updated:** [December 12, 2023, 10:07pm UTC](https://community.auth0.com/t/unblock-an-ip-address-via-the-auth0-ui-instead-of-the-api/122910 "2023-12-12T22:07:11Z")
Howdy, We had an IP address blocked by the Brute-force detection feature. We’d like to unblock this address. It seems from looking around that my only options are adding it to the AllowList (which we don’t want to do,… --- ## [Customizing the unlock page of Brute-Force Protection](https://community.auth0.com/t/customizing-the-unlock-page-of-brute-force-protection/120158)
**Author:** [@d-kimuson](https://community.auth0.com/u/d-kimuson)\ **Replies:** 3\ **Last updated:** [November 13, 2023, 7:37pm UTC](https://community.auth0.com/t/customizing-the-unlock-page-of-brute-force-protection/120158 "2023-11-13T19:37:23Z")
I am trying Brute-Force Protection. I was able to customize the html of email that is sent when user account is blocked according to this documentation. However, I have not found a way to customize the page after moved… --- ## [Unblock link in Account blocked email not working when used with organizations](https://community.auth0.com/t/unblock-link-in-account-blocked-email-not-working-when-used-with-organizations/109645)
**Author:** [@junya.takaichi](https://community.auth0.com/u/junya.takaichi)\ **Replies:** 2\ **Last updated:** [August 3, 2023, 6:11am UTC](https://community.auth0.com/t/unblock-link-in-account-blocked-email-not-working-when-used-with-organizations/109645 "2023-08-03T06:11:57Z")
I’m testing the brute force protection feature and noticed that the unblock link in Account blocked email does not work showing the error message connection is disabled (client\_id: xxxxx - connection: xxxxx). I guess thi… --- ## [Unblocking Email](https://community.auth0.com/t/unblocking-email/107888)
**Author:** [@avinash.rathod](https://community.auth0.com/u/avinash.rathod)\ **Replies:** 5\ **Last updated:** [May 30, 2023, 3:00pm UTC](https://community.auth0.com/t/unblocking-email/107888 "2023-05-30T15:00:36Z")
Hi, In the event that a user receives an unblock email but fails to click on the unblock link within the specified time frame, what is the process to request another unblocking email? Is there a way for the user to init… --- ## [Clarification on brute force protection velocity](https://community.auth0.com/t/clarification-on-brute-force-protection-velocity/105656)
**Author:** [@jo.humphrey](https://community.auth0.com/u/jo.humphrey)\ **Replies:** 1\ **Last updated:** [May 2, 2023, 7:51pm UTC](https://community.auth0.com/t/clarification-on-brute-force-protection-velocity/105656 "2023-05-02T19:51:59Z")
Hi there, In the docs on Attack protection, there is a summary about brute force protection that I think is a bit unclear: Brute-force Protection: \*\*Velocity\*\* of login attempts from an IP for a particular account. Det… --- ## [Can the 30 day account block due to brute force protection be extended?](https://community.auth0.com/t/can-the-30-day-account-block-due-to-brute-force-protection-be-extended/105652)
**Author:** [@jo.humphrey](https://community.auth0.com/u/jo.humphrey)\ **Replies:** 1\ **Last updated:** [April 28, 2023, 6:44am UTC](https://community.auth0.com/t/can-the-30-day-account-block-due-to-brute-force-protection-be-extended/105652 "2023-04-28T06:44:00Z")
Hi there, I found in the docs that a blocked user can get automatically unblocked after 30 days since their last unsuccessful login. Is there any way to turn this feature off, or extend the 30 day window? Ideally we wou… --- ## [Breached Password & Blocked Account events are not visible in user logs](https://community.auth0.com/t/breached-password-blocked-account-events-are-not-visible-in-user-logs/94971)
**Author:** [@Artur](https://community.auth0.com/u/Artur)\ **Replies:** 1\ **Last updated:** [November 28, 2022, 10:21pm UTC](https://community.auth0.com/t/breached-password-blocked-account-events-are-not-visible-in-user-logs/94971 "2022-11-28T22:21:00Z")
Hello, I noticed that whenever we have an event of Blocked Account (limit\_wc) or Breached Password (pwd\_leak) they are not visible in the User logs in the User Management. I think the reason is that those events are mi… --- ## [How to automate a scenario to make user blocked by the brut-force protection mechanism](https://community.auth0.com/t/how-to-automate-a-scenario-to-make-user-blocked-by-the-brut-force-protection-mechanism/88025)
**Author:** [@serp](https://community.auth0.com/u/serp)\ **Replies:** 1\ **Last updated:** [August 3, 2022, 6:34pm UTC](https://community.auth0.com/t/how-to-automate-a-scenario-to-make-user-blocked-by-the-brut-force-protection-mechanism/88025 "2022-08-03T18:34:51Z")
Hello, We are developing an endpoint, which basically proxies calls to Auth0 User Blocks API. The endpoint will be used to unblock users, who blocked themselves by entering an incorrect password multiple times. There i…