Security
Rate Limits
Protect authentication endpoints from brute-force attacks, credential stuffing, and repeated abuse.
Login attempts
5/min
Password reset
3/hour
Email verification
5/hour
Default Protection
Enable rate limits for the most sensitive authentication flows.
settings.py
settings.py
1
2
3
4
5
6
7
8
9
10
11
12
AUTHKITS = {
"rate_limits": {
"login": "5/min",
"password_reset": "3/hour",
"email_verification": "5/hour",
}
}Custom Limits
Tune limits for registration, API tokens, or other sensitive flows.
settings.py
settings.py
1
2
3
4
5
6
7
8
9
10
11
12
AUTHKITS = {
"rate_limits": {
"login": "5/min",
"register": "3/min",
"api_tokens": "10/min",
}
}Next Steps
Track login attempts, password resets, MFA events, and admin activity with audit logs.
Audit Logs