Authentication rate limits per plan, and the limits you can set yourself.
| Limit | Free | Pro | Scale | Enterprise |
|---|---|---|---|---|
| Auth emails per month (per project) | 500 | 1,100 | 1,300 | 1,700 |
| Auth emails per hour | 30 /h | 200 /h | 500 /h | 2,000 /h |
| Auth token refreshes per 5 min (per IP) | 150 | 1,800 | 5,000 | 150 |
| Auth sign-ins/sign-ups per 5 min (per IP) | 30 | 300 | 1,000 | 30 |
The e-mail limit counts every auth e-mail of the project. Token refresh and sign-in/sign-up limits are counted per IP address. Requests over a limit get HTTP 429.
#Limits you can set
In Studio → Authentication → Settings you can lower the plan limits and set these:
| Limit | Default | Counted |
|---|---|---|
| E-mails sent | Plan limit (30 with your own SMTP, up to 100,000) | Per hour, whole project |
| Sign-ins and sign-ups | Plan limit | Per 5 minutes, per IP |
| Token refreshes | Plan limit | Per 5 minutes, per IP |
| Verifications (links and codes) | 30 | Per 5 minutes, per IP |
| Magic link and code requests | 30 | Per 5 minutes, per IP |
| Anonymous sign-ins | 30 | Per hour, per IP |
| SMS sent (phone sign-in) | 30 | Per hour, whole project; adjustable under Sign-in methods → Phone |
Values above your plan's limit are rejected. With your own SMTP server the e-mail limit is yours to set.