diff --git a/auth.go b/auth.go
index 4581286..8a5e2c4 100644
--- a/auth.go
+++ b/auth.go
@@ -86,7 +86,7 @@ var (
 	loginAttempts_ = map[string]*loginAttempts{}
 )
 
-const loginMaxAttempts = 8
+const loginMaxAttempts = 4
 const loginWindow = 5 * time.Minute
 
 func clientIP(r *http.Request) string {