Be part of JetBrains PHPverse 2026 on June 9 – a free online event bringing PHP devs worldwide together.

jonaspas's avatar

Where to change Login Throttle in Laravel 8?

Hi there, I'm sure the answer might be easy, but I can't find it on the net ^^ I want to change the time the user is locked out after 5 wrong login-attempts. Where to change this in Laravel 8? The answers I find to this are for Laravel 5 and don't seem to be applicable for Laravel 8.... I think I'm using the laravel standard auth scaffolding. Thanks in advance! Jonas

0 likes
4 replies
SilenceBringer's avatar
Level 55

@jonaspas hm.. isn't it accept maxAttempts and decayMinutes as params? for example, in routes

->middleware(['throttle:5,10'])

lock to 10 minutes after 5 failed attempts

1 like
jonaspas's avatar

Hi @monooso , thanks for the hint, I've been through this, but didn't found/understand the answer to my problem. @silencebringer thanks, this is already a very good option, it works like this. I don't get the message in the login form like before, but get redirected to a "too many requests"-error page. That's already not bad, but I don't get the info how long I will be locked out like it is in the standard Laravel login-form. Do you know how to get that information to the user?

EDIT: but I could do this statically on the error page for now, I think. So this should be okay for now :) Thanks a lot!

Please or to participate in this conversation.