What changed: When the user's email is available, Auth0 will now send an email notification for brute‑force blocks in all identifier scenarios (e.g., phone, username), supplementing existing delivery rules.
Why it matters: Ensures users receive blocking notifications consistently even when logging in via phone or username, improving visibility and response.
To learn more about Brute Force Protection read on online documentation here
Fetched April 14, 2026