Supabase Auth: over_email_send_rate_limit
Supabase returns over_email_send_rate_limit when too many auth emails have been sent to an address in a short time. For production, configure your own SMTP provider and adjust the email rate limits, and avoid re-sending on every click.
Cause: Auth emails are hitting Supabase's email send limits (the built-in email service is very limited).
How to fix it
- Configure custom SMTP under Authentication settings.
- Review the Auth rate limits in the dashboard and raise the email limit for your SMTP setup.
- Debounce sign-up / magic-link / reset buttons in your UI.
- Show users a 'wait and try again' message instead of retrying automatically.
Example
Illustrative example, not from a customer project.
- <button onClick={sendMagicLink}>Send link</button>
+ <button onClick={sendMagicLink} disabled={sending}>Send link</button>
FAQ
Does this mean my project is broken?
No. It's a rate limit; emails resume after a wait.
Why does it happen right after launch?
The default email service is meant for testing; real traffic needs custom SMTP.
Get a $149 diagnosis See pricing Still exposed or still logged out? Get an auth & database security fix (Supabase, Firebase).
- Fixed, or we keep working free until it is (within the written scope).
- A human reviews every fix before it ships.
- read-only access; fixes arrive as pull requests you merge
- Your $149 diagnosis is credited in full toward any paid job.