Throttling (rate limiting) is documented on the Routing page.
It's also mentioned in the Authentication docs (which links to the Routing docs).
Be part of JetBrains PHPverse 2026 on June 9 – a free online event bringing PHP devs worldwide together.
Hi there, I'm sure the answer might be easy, but I can't find it on the net ^^ I want to change the time the user is locked out after 5 wrong login-attempts. Where to change this in Laravel 8? The answers I find to this are for Laravel 5 and don't seem to be applicable for Laravel 8.... I think I'm using the laravel standard auth scaffolding. Thanks in advance! Jonas
@jonaspas hm.. isn't it accept maxAttempts and decayMinutes as params? for example, in routes
->middleware(['throttle:5,10'])
lock to 10 minutes after 5 failed attempts
Please or to participate in this conversation.