How can I prevent brute force login attacks using Django in Python

Question

Hi all. Pretty straightforward question - I wanted to know if there is any universally accepted way of protecting the Django applications against a brute force login attack?

Need it for a project of mine.

All help appreciated!

Answer 1

Hi. Django-axes is an already existing application which is widely considered as the standard for this.

Axes is basically used to detect failed login attempts and notify the user of the same.

Also, there is Django-ratelimit if you are considering taking a more general approach.

Hope this helped!