Brute Force Protection not Working with a Specific Connection

Connections

Last Updated: Sep 10, 2025

Overview

The users are labeled as blocked by Brute Force but they can login normally.

Applies To

Brute-Force Protection

Cause

This issue is related to connections with Brute Force disabled by Management API (the Dashboard toggle is hidden).

Solution

This flag can be changed with Management API as it follows :

PATCH /api/v2/connections/:connection_id

{ "options": { "brute_force_protection": true } }

NOTE: By default, the value brute_force_protection is set to true. Check that brute force protection (BFP) is enabled for the connection(s) in the Dashboard with this toggle below the "Disable Sign Ups".