Protected by rate limiting. 5 failed attempts will lock your account for 15 minutes.