diff --git a/config/application.yml.default b/config/application.yml.default
index cdfee001840..e367a83a9b6 100644
--- a/config/application.yml.default
+++ b/config/application.yml.default
@@ -189,7 +189,7 @@ logins_per_ip_period: 60
 logo_upload_enabled: false
 mailer_domain_name: http://localhost:3000
 max_auth_apps_per_account: 2
-max_bad_passwords: 100
+max_bad_passwords: 5
 max_bad_passwords_window_in_seconds: 60
 max_emails_per_account: 12
 max_mail_events: 4