diff --git a/lib/defaults/defaults.go b/lib/defaults/defaults.go
index 61f7a276c18fa..b9ebe18c7107a 100644
--- a/lib/defaults/defaults.go
+++ b/lib/defaults/defaults.go
@@ -143,7 +143,7 @@ const (
 
 	// HandshakeReadDeadline is the default time to wait for the client during
 	// the TLS handshake.
-	HandshakeReadDeadline = 5 * time.Second
+	HandshakeReadDeadline = 15 * time.Second
 
 	// SignupTokenTTL is a default TTL for a web signup one time token
 	SignupTokenTTL = time.Hour