How to block login access after 3 wrong firebase attempts

Asked

Viewed 244 times

2

I was putting the lock after 3 wrong attempts on login, however I found in some forums that when hold malicious tries to force multiple passwords he will not use the email fields and password, this lock needs to be done by firebase rules to where I found, but I couldn’t find a light to make the rules. This is true and it is also possible to do this blocking by firebase.

1 answer

1

You cannot change firebase login attempts. Blocked user may try again after few minutes, but this is not managed by you.

Firebase SDK will limit the user who tries :

  • several incorrect password attempts.
  • several new password creations.
  • various attempts of password recovery.

You may have more information on this link : https://firebase.google.com/docs/auth/limits?hl=pt-br

Browser other questions tagged

You are not signed in. Login or sign up in order to post.