diff --git a/backend/grant/user/views.py b/backend/grant/user/views.py
index 622e8959..4f43a7c9 100644
--- a/backend/grant/user/views.py
+++ b/backend/grant/user/views.py
@@ -122,6 +122,7 @@ def create_user(
 
 
 @blueprint.route("/auth", methods=["POST"])
+@limiter.limit("30/hour;5/minute")
 @body({
     "email": fields.Str(required=True),
     "password": fields.Str(required=True)