Skip to main content

Protect is Clerk's fraud and abuse protection system, built into every sign-up and sign-in. It evaluates each attempt using signals from multiple sources and then allows, challenges, or blocks the attempt based on the protections you've enabled.

Because Protect runs within Clerk's authentication flows, applications using Clerk's prebuilt components or the Account Portal need no changes to their sign-up flow once they meet the requirements.

Features

  • Protections are the defenses you manage in the Clerk Dashboard. Each one is designed to target a specific kind of abuse, such as sign-ups from VPNs or repeated failed sign-ins.
  • Application Logs record every block and challenge as a Protect event.

Plans and pricing

Every application includes basic protections at no extra cost, such as brute-force protection and challenges for suspicious sign-ups. If you're under frequent attack, the Business plan includes advanced protections, such as rate limits, network-type blocks, and country restrictions.

Next steps

  • Get started with Protect: check that your application meets the requirements, then turn on protections.
  • Protections: see every protection, what it applies to, and what it does.

Feedback

What did you think of this content?

Last updated on