Rate limit login attempts to Firebase email and password auth

[Rusty Miller]

Hello,

Is there a way to prevent the number of attempts to log with Firebase email and password auth?  I want to prevent brute force login attempts.

For example, I want the system to add a delay of 5 or 10 min after 5 failed login attempts and either reset with the same timeout or an exponential increase of the timeout for the next 5 attempts.

Best Regards,

Rusty

[Ralph Roper]

Would also be interested in answer to this as no specific details available in docs.

I found below issue from 2020 but was hoping to get confirmation on allowed number of requests per second to signInWithEmailAndPassword endpoint from same IP

https://github.com/firebase/FirebaseUI-Android/issues/1665

For email/password authentication and reCaptcha Enterprise enabled does it show the reCaptcha after so many failed login attempts or is the reCaptcha always shown?

Thanks.

Ralph