Introducing Clerk Protect
- Category
- Product
- Published
Fraud and abuse protection built directly into your sign-up and sign-in flows.
Clerk Protect helps stop fake accounts and account takeover attacks with protections you can configure in the Clerk Dashboard. Clerk secures more than 100,000 active applications. Protect brings what we've learned fighting fraud and abuse directly into your authentication flows.
New protections on the Business plan
The Business plan now includes five advanced protections to give you more control over who can sign up:
- Block sign-ups from suspicious network types, such as VPNs, Tor, proxies, and hosting networks.
- Challenge residential proxies to make automated abuse more costly while keeping sign-up smooth for legitimate users.
- Block sign-ups by country using a blocklist or an allowlist.
- Limit sign-ups per IP address to an hourly limit you set.
- Block risky email domains at a protection level you choose.
Protections for every application
Every application includes the following protections:
- Challenge suspicious sign-ups with a CAPTCHA to help stop automated account creation.
- Require Device Intelligence checks to check for signs of automation in browser-based interactions.
- Lock accounts after failed sign-ins to protect your users against targeted brute-force attacks.
- Device Trust requires additional verification when someone signs in from a new device, helping protect users against stolen credentials.
- User enumeration protection helps prevent attackers from discovering which email addresses and phone numbers have accounts.
- Block email subaddresses to reduce the number of accounts one person can create from a single inbox with variations like
user+1@example.com. - Block disposable email addresses to stop sign-ups from throwaway inboxes.
Each protection is built and maintained by Clerk. Manage them together on the Protections page in the Clerk Dashboard. We'll keep adding protections as we find new ways to protect your application.
Get started
Explore Protect in the Clerk Dashboard and choose the protections that fit your application. See the getting started guide for requirements and setup instructions.