--- title: Configure login throttling on your TYPO3 site with v11 url: "https://b13.com/knowledge/limit-allowed-attempts-for-logins-in-typo3-v11" description: "Rate limiting increases security and brings better login UX to all your TYPO3 users. Check out why we love it in #7 in our series of 13 Things We Love About TYPO3 v11." image: "https://b13.com/fileadmin/_processed_/2/d/csm_limited-logins_191-3_6790a45845.png" date: 2022-02-25 modified: 2026-08-19 lastUpdated: 2026-08-19 --- # Configure login throttling on your TYPO3 site with v11 [ TYPO3 v11 ](https://b13.com/knowledge/typo3-v11) [ TYPO3 ](https://b13.com/knowledge/typo3) [ Security ](https://b13.com/knowledge/security) Limit allowed attempts for logins in TYPO3 v11 ================================================ ![](https://b13.com/fileadmin/_processed_/c/6/csm_benni_5e519221c4.jpg)Benni Mack 25 February 2022 [ RSS Feed ](https://b13.com/rss.xml) ![Limited logins](https://b13.com/fileadmin/_processed_/f/8/csm_limited-logins_36d18758a9.webp) **Flexible login restrictions** This post is part of our TYPO3 Version 11 Series. We’re shining a spotlight on some of the really useful features in version 11 and why you should upgrade. - [Link Sharing in TYPO3 v11](https://b13.com/knowledge/link-sharing-in-typo3-v11) - [Direct Downloads of Assets and Media](https://b13.com/knowledge/direct-downloads-assets-and-media) - [New CLI commands and better automation for Continuous Integration](https://b13.com/knowledge/new-cli-commands-better-automation-for-continuous-integration) - [Resizable Navigation Area in TYPO3](https://b13.com/knowledge/resizable-navigation-area-in-typo3) - [Multi-factor authentication ](https://b13.com/knowledge/multi-factor-authentication-in-typo3-11) - [Search & Filter for Folders and Assets](https://b13.com/knowledge/search-filter-for-folders-and-assets) - **[Limit allowed attempts for logins in TYPO3 v11 ](https://b13.com/knowledge/limit-allowed-attempts-for-logins-in-typo3-v11)** - [Show Columns Selector in List View and File List View](https://b13.com/knowledge/show-columns-selector-in-list-view-and-file-list-view) - [Multi Record Selection](https://b13.com/knowledge/multi-record-selection) - [Keyboard Navigation for Module Menu & Context Menu](https://b13.com/knowledge/keyboard-navigation-for-module-menu-context-menu) - [Workspaces Improvements](https://b13.com/blog/workspaces-improvements) - [Consistent UX makes selecting items more intuitive](https://b13.com/knowledge/consistent-ux-makes-selecting-items-more-intuitive) - [New TCA types in TYPO3 version 11](https://b13.com/knowledge/new-tca-types-in-typo3-version-11) TYPO3 v11 ships with a new feature called “Rate Limiting”. This is useful wherever you want to prevent excessive use or maintain availability of a service—and it really shines when used to restrict login attempts to the TYPO3 backend. Previous TYPO3 versions had a hard “let’s wait 5 seconds” limit before you could attempt to log in again after entering an incorrect username or password. This was not only inconvenient if you had a simple typo in your username (five seconds is a long time to wait!), but it actively blocked the server for five seconds. Malicious people could exploit this window to attempt a Denial-of-Service attack (hopefully you have a Web Application Firewall in place for such things!). We are happy to say that this behavior is now in the past. TYPO3 v11’s Rate Limiting is based on Symfony’s [Rate Limiter](https://symfony.com/doc/current/rate_limiter.html) component, and by default it only allows five failed login attempts from the same IP address within a 15 minute period. This means if your user simply hits the wrong key when typing in their password, they can fix it straight away and get on with their work. It also means you can be confident in the default security settings of your system. How do you know if you’re running with TYPO3 v11? Just try to log in with the wrong username. The Rate Limiting feature will show you the error message for a failed login. Configuration --------------- As you’ve come to expect with TYPO3, everything is configurable. Site Administrators can modify the default values for the number of login attempts. As a system maintainer, use the “Admin Tools -> Settings” module, select “Configure Installation-Wide Options” and search for “Rate Limit”. Maximum amount of login attempts for the time interval in \[BE\]\[loginRateLimitInterval\], before further login requests will be denied. Setting this value to “0” will disable login rate limiting. Allowed time interval for the configured rate limit. Individual values using PHP-relative formats can be set in AdditionalConfiguration.php. A list of IP addresses that are excluded from the rate limiting feature. This is very useful for IP addresses coming from an internal network from a company or organization. You can customize these settings in your installation’s `LocalConfiguration.php` file as well, to have everything configured in deployable setups. Find out more --------------- For a deep dive into how this feature works, check out the [Rate limiting for failed logins](https://docs.typo3.org/c/typo3/cms-core/main/en-us/Changelog/11.3/Feature-93825-RateLimitingForFailedLogins.html) documentation. But that’s not all! Developers can make use of TYPO3’s rate limiting API to implement rate limiting in lots of other places in their TYPO3 setup. Talk to us about opportunities to introduce rate limiting on your TYPO3 installation. Pro Tip: Be sure to check out even more security measures in TYPO3 v11, such as the brand new built-in [Multi Factor Authentication process](https://b13.com/knowledge/multi-factor-authentication-in-typo3-11)! We’re here to offer professional support with your upgrades to TYPO3 v11, or any topics regarding your TYPO3 projects. ------------------------------------------------------------------------------------------------------------------------ [ Let’s connect ](https://b13.com/lets-connect) ### Written by: ![Bild von Benni Mack](https://b13.com/fileadmin/_processed_/c/6/csm_benni_66cce9a81f.webp) b13 co-founder and TYPO3 CMS Core Development Lead, Benni Mack, heads our technical practices, setup and maintenance of our technical infrastructure, and coordinates our open-source contribution. His essential tool: TYPO3 Benni Mack CTO [ more from Benni Mack ](https://b13.com/team/benni-mack) Related Articles ------------------ - ![Cartoon trophy character surrounded by hands giving thumbs up and a heart gesture, set against a gear-patterned background.](https://b13.com/fileadmin/_processed_/f/7/csm_T3ppy_Design_Kit_Headerbild_b51eb9dc31.webp) ### T3ppy Gives TYPO3 a Friendly Face 06 August 2026 | Florian “Flix” Keitgen TYPO3 is powerful—but it doesn’t have to feel impersonal. Meet T3ppy, our friendly companion for the backend. [ Read more: T3ppy Gives TYPO3 a Friendly Face ](https://b13.com/knowledge/t3ppy-design-kit) - ![Gavel labeled "AI" on a circuit-patterned background with yellow stars, symbolizing regulation or legislation related to artificial intelligence in the EU.](https://b13.com/fileadmin/_processed_/1/0/csm_EUAIAct_Headerbild_510724b3de.webp) ### AI Content in TYPO3: Labelling Needs Accountability 02 August 2026 | Benni Mack The EU AI Act brings the origins of AI-generated content into focus. AI Label marks AI-generated and AI-edited content in TYPO3 and records who signed off the published version—for… [ Read more: AI Content in TYPO3: Labelling Needs Accountability ](https://b13.com/knowledge/ai-content-in-typo3-labelling-needs-accountability) - ![A series of stylized figures in various poses, each with a distinctive orange hat, depict a progression from walking to standing still while looking at a phone, set against a purple grid background.](https://b13.com/fileadmin/_processed_/d/7/csm_QueuesDDEV_Headerbild_f640931350.webp) ### Better scalability with decoupled queues: How to set up RabbitMQ with TYPO3 10 April 2024 | Jochen Roth When built-in message transports hit their limits, RabbitMQ can provide TYPO3 with a scalable, robust message queue. [ Read more: Better scalability with decoupled queues: How to set up RabbitMQ with TYPO3 ](https://b13.com/knowledge/better-scalability-with-decoupled-queues-how-to-set-up-rabbitmq-with-typo3) - ![A cartoon character resembling a shield gives a thumbs up in front of a computer interface with various menu options.](https://b13.com/fileadmin/_processed_/e/6/csm_Header_cda1f80173.webp) ### Meet T3ppy: A New Era for Editorial Work in TYPO3 01 April 2026 | Florian “Flix” Keitgen T3ppy and the AiM extension bring AI directly into the TYPO3 backend—enhancing SEO, content quality, and workflows with centralized control. [ Read more: Meet T3ppy: A New Era for Editorial Work in TYPO3 ](https://b13.com/knowledge/meet-t3ppy-a-new-era-for-editorial-work-in-typo3) - ![Retro microphone illustration with a shopping cart icon in the background, symbolizing e-commerce or online shopping.](https://b13.com/fileadmin/_processed_/f/8/csm_Marketplace_Headerbild_ee1575614c.webp) ### Why TYPO3 Needs a Marketplace for Products 25 March 2026 | Florian “Flix” Keitgen A marketplace would make TYPO3 products more discoverable, easier to compare, and benefit both agencies and clients alike. [ Read more: Why TYPO3 Needs a Marketplace for Products ](https://b13.com/knowledge/why-typo3-needs-a-marketplace-for-products) - ![A hand holding a magnifying glass over a laptop screen displaying a webpage with an image and text elements.](https://b13.com/fileadmin/_processed_/e/5/csm_BackendUserSection_Headerbild_6093c842fd.webp) ### Unlocking TYPO3’s Hidden Gem: The Backend User Section (Doktype 6) 05 March 2026 | David Steeb Discover TYPO3’s underrated doktype 6 (Backend User Section) for secure internal previews, editor training, and prototyping. Learn real use cases, common pitfalls like 403 errors… [ Read more: Unlocking TYPO3’s Hidden Gem: The Backend User Section (Doktype 6) ](https://b13.com/knowledge/backend-user-section-in-typo3-uses-pitfalls-helper) - ![Two stylized web page designs featuring a user profile, image placeholders, and text sections, set against a light blue background.](https://b13.com/fileadmin/_processed_/2/0/csm_BackendPreview_Headerbild_b4c5799cfa.webp) ### Backend Previews With a System—Why We Built EXT:backendpreviews 09 February 2026 | David Steeb EXT:backendpreviews brings structure and consistency to content previews in the TYPO3 backend using Fluid templates, layouts, and partials. [ Read more: Backend Previews With a System—Why We Built EXT:backendpreviews ](https://b13.com/knowledge/backend-previews-with-a-system-why-we-built-extbackendpreviews) - ![A human hand shakes a robotic hand against a purple background with heart patterns, symbolizing collaboration between humans and technology.](https://b13.com/fileadmin/_processed_/6/2/csm_AIbotsLoveMarkdown_Headerbild_72fe5820d6.webp) ### The Internet Is No Longer Just for Humans—AI Bots Love Markdown 28 January 2026 | Benni Mack Discover why most web traffic is now automated and how TYPO3’s structured content model prepares websites for humans, editors, and AI systems. [ Read more: The Internet Is No Longer Just for Humans—AI Bots Love Markdown ](https://b13.com/knowledge/the-internet-is-no-longer-just-for-humans-ai-bots-love-markdown) - ![Several colorful web page mockups stacked together, showcasing different layouts and design elements against a purple background.](https://b13.com/fileadmin/_processed_/e/3/csm_CaminoTheme_Headerbild_d082598009.webp) ### Camino—The Need for a Default Theme in TYPO3 Is Real 27 January 2026 | Benni Mack With TYPO3 v14, Camino introduces a default theme that removes friction from first installs. Why this matters—and how TYPO3 laid the groundwork. [ Read more: Camino—The Need for a Default Theme in TYPO3 Is Real ](https://b13.com/core-insights/blog/camino-the-need-for-a-default-theme-in-typo3-is-real) - ![Graphic featuring stylized representations of a tower with the text "T3CON25 Düsseldorf" prominently displayed in the center.](https://b13.com/fileadmin/_processed_/7/b/csm_T3CON2025_Headerbild_fc9c5cc53e.webp) ### T3CON25—One Step Closer to the Future of Content Management 10 December 2025 | Franzi Töpler T3CON25 showcased the future of TYPO3 with insights on TYPO3 v14, AI, digital sovereignty, and open-source solutions driving secure, modern web experiences. [ Read more: T3CON25—One Step Closer to the Future of Content Management ](https://b13.com/knowledge/shaping-the-future-of-content-management-t3con25)