# Slow log in on NextCloud 10

**URL:** <https://help.nextcloud.com/t/slow-log-in-on-nextcloud-10/2655>\
**Category:** ℹ️ Support\
**Tags:** nc10, bruteforce\
**Created:** [August 26, 2016, 5:45pm UTC](https://help.nextcloud.com/t/slow-log-in-on-nextcloud-10/2655 "2016-08-26T17:45:00Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![tx7](https://help.nextcloud.com/letter_avatar/tx7/32/5_5575768a8748004e209b776fc1b2916d.png) [@tx7](https://help.nextcloud.com/u/tx7)\
**Post date:** [August 26, 2016, 5:45pm UTC](https://help.nextcloud.com/t/slow-log-in-on-nextcloud-10/2655/1 "2016-08-26T17:45:00Z")

</div>

I just updated to NC10, and I notice that it take more than 10 secs to log in.  
Anybody else have this issue?

config.php

```
    <?php
$CONFIG = array (
  'instanceid' => 'ocboc03zyp7e',
  'passwordsalt' => 'removed',
  'secret' => 'removed',
  'trusted_domains' =>
  array (
    0 => '192.168.1.97',
    1 => 'localhost',
    2 => 'abc.xyz.com',
  ),
  'datadirectory' => '/media/54bf67db-da31-4c50-bb3c-27140944b223/www/nextcloud/data',
  'overwrite.cli.url' => 'https://abc.xyz.com',
  'dbtype' => 'mysql',
  'version' => '9.1.0.16',
  'dbname' => 'owncloud',
  'dbhost' => 'localhost',
  'dbtableprefix' => 'oc_',
  'dbuser' => 'oc_admin',
  'dbpassword' => 'random_characters',
  'logtimezone' => 'EST',
  'installed' => true,
  'log_type' => 'owncloud',
  'log_authfailip' => true,
  'allow_user_to_change_display_name' => true,
  'memcache.local' => '\\OC\\Memcache\\Redis',
  'filelocking.enabled' => 'true',
  'memcache.distributed' => '\\OC\\Memcache\\Redis',
  'memcache.locking' => '\\OC\\Memcache\\Redis',
  'redis' =>
  array (
    0 =>
    array (
      0 => 'localhost',
      1 => 11211,
    ),
  ),
  'mail_smtpmode' => 'smtp',
  'mail_smtpsecure' => 'ssl',
 'mail_from_address' => 'user1',
  'mail_domain' => 'yahoo.com',
  'mail_smtpauthtype' => 'LOGIN',
  'mail_smtpauth' => 1,
  'mail_smtphost' => 'smtp.mail.yahoo.com',
  'mail_smtpport' => '465',
  'mail_smtpname' => 'abc@yahoo.com',
  'mail_smtppassword' => 'xxxxx',
  'theme' => '',
  'loglevel' => 2,
  'maintenance' => false,
  'htaccess.RewriteBase' => '/',
  'updater.release.channel' => 'stable',
);
```

---

<div class="post-metadata">

**Author:** ![tflidd](https://help.nextcloud.com/letter_avatar/tflidd/32/5_5575768a8748004e209b776fc1b2916d.png) [@tflidd](https://help.nextcloud.com/u/tflidd)\
**Post date:** [August 26, 2016, 8:18pm UTC](https://help.nextcloud.com/t/slow-log-in-on-nextcloud-10/2655/2 "2016-08-26T20:18:06Z")

</div>

Could be the new bruteforce-protection 😃  
You can try to delete previous failed login attempts:

> [@30 sec. to wait before login since update 10.0](https://help.nextcloud.com/t/30-sec-to-wait-before-login-since-update-10-0/2599):
>
> Hi all, I have updated today my nextcloud to 10.0 Stable from 9.53 Stable. Everything got OK but a problem came : When I log in on Firefox (same thing for Chrome), I have to wait 30 sec before files page appears. I hadn’t this problem before. I think it appeared when I have created some applications passwords I have deleted after. Now, I have deleted all the password for applications, but the 30 seconds remain… This is my access.log [25/Aug/2016:18:19:31 +0200] “POST /index.php/login HTTP/…

---

<div class="post-metadata">

**Author:** ![tx7](https://help.nextcloud.com/letter_avatar/tx7/32/5_5575768a8748004e209b776fc1b2916d.png) [@tx7](https://help.nextcloud.com/u/tx7)\
**Post date:** [August 26, 2016, 8:23pm UTC](https://help.nextcloud.com/t/slow-log-in-on-nextcloud-10/2655/3 "2016-08-26T20:23:31Z")

</div>

Hello,

I cleared the log, and restart Nginx, but same slow effect!  
Is the brute-force protection enabled by default?  
If so, how can I disable it?  
I’m using Fail2Ban is good for me.

---

<div class="post-metadata">

**Author:** ![tflidd](https://help.nextcloud.com/letter_avatar/tflidd/32/5_5575768a8748004e209b776fc1b2916d.png) [@tflidd](https://help.nextcloud.com/u/tflidd)\
**Post date:** [August 26, 2016, 11:34pm UTC](https://help.nextcloud.com/t/slow-log-in-on-nextcloud-10/2655/4 "2016-08-26T23:34:42Z")

</div>

> [@tx7](#):
>
> Is the brute-force protection enabled by default?

Yes, you can disable it in your config.php, add:

```
    'auth.bruteforce.protection.enabled' => false,

```

---

<div class="post-metadata">

**Author:** ![tx7](https://help.nextcloud.com/letter_avatar/tx7/32/5_5575768a8748004e209b776fc1b2916d.png) [@tx7](https://help.nextcloud.com/u/tx7)\
**Post date:** [August 27, 2016, 12:32am UTC](https://help.nextcloud.com/t/slow-log-in-on-nextcloud-10/2655/5 "2016-08-27T00:32:40Z")

</div>

I added the code, and restarted Nginx service.

Still slow…

---

<div class="post-metadata">

**Author:** ![tflidd](https://help.nextcloud.com/letter_avatar/tflidd/32/5_5575768a8748004e209b776fc1b2916d.png) [@tflidd](https://help.nextcloud.com/u/tflidd)\
**Post date:** [August 27, 2016, 6:49am UTC](https://help.nextcloud.com/t/slow-log-in-on-nextcloud-10/2655/6 "2016-08-27T06:49:41Z")

</div>

Can you see what’s happening during these 10s? Is there a high load of the php or mysql process? You could also increase the log level of your services to obtain more information.

---

<div class="post-metadata">

**Author:** ![tx7](https://help.nextcloud.com/letter_avatar/tx7/32/5_5575768a8748004e209b776fc1b2916d.png) [@tx7](https://help.nextcloud.com/u/tx7)\
**Post date:** [August 27, 2016, 11:45am UTC](https://help.nextcloud.com/t/slow-log-in-on-nextcloud-10/2655/7 "2016-08-27T11:45:16Z")

</div>

Ok, my system just woke up today, I logged in fast just like before.  
So, I guess the system need to be reboot after the changes are made.  
It is resolved.

Thanks.

---

<div class="post-metadata">

**Author:** ![pierreozoux](https://help.nextcloud.com/user_avatar/help.nextcloud.com/pierreozoux/32/49990_2.png) [@pierreozoux](https://help.nextcloud.com/u/pierreozoux)\
**Post date:** [September 13, 2016, 11:59am UTC](https://help.nextcloud.com/t/slow-log-in-on-nextcloud-10/2655/8 "2016-09-13T11:59:45Z")

</div>

I hit the exact same issue, and the solution was clearly:

> [@30 sec. to wait before login since update 10.0](https://help.nextcloud.com/t/30-sec-to-wait-before-login-since-update-10-0/2599):
>
> Hi all, I have updated today my nextcloud to 10.0 Stable from 9.53 Stable. Everything got OK but a problem came : When I log in on Firefox (same thing for Chrome), I have to wait 30 sec before files page appears. I hadn’t this problem before. I think it appeared when I have created some applications passwords I have deleted after. Now, I have deleted all the password for applications, but the 30 seconds remain… This is my access.log [25/Aug/2016:18:19:31 +0200] “POST /index.php/login HTTP/…

Thanks!

---

<div class="post-metadata">

**Author:** ![Tom\_Alperin](https://help.nextcloud.com/user_avatar/help.nextcloud.com/tom_alperin/32/1205_2.png) [@Tom\_Alperin](https://help.nextcloud.com/u/Tom_Alperin)\
**Post date:** [September 25, 2016, 7:13am UTC](https://help.nextcloud.com/t/slow-log-in-on-nextcloud-10/2655/9 "2016-09-25T07:13:27Z")

</div>

A nice addition to the brute force prevention might be a reset on successful login. I think this feature is going to get turned off by many due to the inconvienience. Having the timer reset after a successful login would eliminate the inconvienience without decreasing security.

---

<div class="post-metadata">

**Author:** ![wwe](https://help.nextcloud.com/user_avatar/help.nextcloud.com/wwe/32/72963_2.png) [@wwe](https://help.nextcloud.com/u/wwe)\
**Post date:** [November 6, 2024, 8:54pm UTC](https://help.nextcloud.com/t/slow-log-in-on-nextcloud-10/2655/10 "2024-11-06T20:54:53Z")

</div>



---

<div class="post-metadata">

**Author:** ![wwe](https://help.nextcloud.com/user_avatar/help.nextcloud.com/wwe/32/72963_2.png) [@wwe](https://help.nextcloud.com/u/wwe)\
**Post date:** [December 4, 2024, 3:26pm UTC](https://help.nextcloud.com/t/slow-log-in-on-nextcloud-10/2655/11 "2024-12-04T15:26:49Z")

</div>


