[null,null,["最后更新时间 (UTC)：2025-08-18。"],[],[],null,["# Firebase Authentication Limits\n\nThe following auth operations have limitations on the frequency you can perform\nthem. Contact\nFirebase\na few weeks in advance\nto discuss special use cases.\n| **Note:** Limitations apply per customer and can change without notice. Abuse protections may be enabled without warning on accounts that demonstrate suspicious traffic patterns.\n\nDaily Instrumentless Usage Limits\n---------------------------------\n\nThe following limits are daily usage limits for users of\nFirebase Authentication with Identity Platform on the no-cost Spark plan.\n\nThese usage limits correspond directly to\n[Google Cloud Pricing Tiers](https://cloud.google.com/identity-platform/pricing).\n\n| Usage | Instrumentless Limit |\n|---------------------------|----------------------|\n| Tier 1 Daily Active Users | 3000 per day |\n| Tier 2 Daily Active Users | 2 per day |\n\nAccount creation and deletion limits\n------------------------------------\n\n| Operation | Limit |\n|-------------------------------|---------------------------------------|\n| New account creation | 100 accounts/hour for each IP address |\n| Account deletion | 10 accounts/second |\n| Batch account deletion | 1 request/second |\n| Account configuration updates | 10 requests/second |\n\n| **Note:** You can schedule a temporary increase to the account creation limit in the Firebase console\n\nAccount limits\n--------------\n\n| Account type | Limit |\n|--------------------------|-------------|\n| Anonymous user accounts | 100 million |\n| Registered user accounts | Unlimited |\n\nEmail sending limits\n--------------------\n\nThe quotas listed in this section scale with the number of users.\n\n| Operation | Spark plan limit | Blaze plan limit |\n|-----------------------------|------------------|--------------------|\n| Address verification emails | 1000 emails/day | 100,000 emails/day |\n| Address change emails | 1000 emails/day | 10,000 emails/day |\n| Password reset emails | 150 emails/day | 10,000 emails/day |\n| Email link sign-in emails | 5 emails/day | 25,000 emails/day |\n\n| **Note:** The limits for email link sign-in emails were recently changed. Please add a billing instrument to go beyond 5 email link sign-in emails.\n\nEmail link generation limits\n----------------------------\n\nThe quotas listed in this section scale with the number of users.\n\n| Operation | Spark plan limit | Blaze plan limit |\n|----------------------------|------------------|---------------------|\n| Address verification links | 10,000 links/day | 1,000,000 links/day |\n| Password reset links | 1500 links/day | 100,000 links/day |\n| Sign-in links | 20,000 links/day | 250,000 links/day |\n\nPhone number sign-in limits\n---------------------------\n\n| Operation | Limit |\n|--------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------|\n| User sign-ins | 1600/minute, as well as the pricing and limits specified on the [Pricing](/pricing) page |\n| Verification code SMS messages | Pay as you go (Blaze) plan only. - Firebase Authentication: 3000 sent SMS/day limit - Firebase Authentication with Identity Platform: No limit |\n| Verification requests | 150 requests/IP address/hour |\n\nVerification SMS sending limits\n-------------------------------\n\n| Operation | Limit |\n|--------------------------------------|-------------------------------|\n| Verification SMS sent. | 1,000 sent/minute |\n| Verification SMS sent per IP address | 50 sent/minute, 500 sent/hour |\n\nAdditionally, there is a limit on the number of verification SMS messages a project\ncan send to a single phone number within a set amount of time. You can test with [fictional numbers](https://firebase.google.com/docs/auth/android/phone-auth#test-with-fictional-phone-numbers) or\nacross multiple devices to ensure a project does not exceed these limits.\n\nAdditionally, you can track verification codes sent per phone number if you've enabled\n[Activity Logging](/identity-platform/docs/activity-logging) on your project.\n\nIdentity Toolkit API limits\n---------------------------\n\n| Operation | Limit |\n|----------------------------------------------|-----------------------------------------------|\n| Operations per service account | 500 requests/second |\n| Operations per project | 1000 requests/second, 10 million requests/day |\n| Account uploads per project\\* | 3600 uploads/minute |\n| Account downloads per project\\* | 21,000 requests/minute |\n| UserInfo queries per project\\* | 900 requests/minute |\n| Configuration updates per project\\* | 300 requests/minute |\n| Configuration updates per project and user\\* | 300 requests/minute |\n| Bulk delete accounts per project\\* | 3000 requests/minute |\n| Custom token sign-ins per project | 45,000 sign-ins/minute |\n| `createAuthURI` calls per IP address | 120 requests/hour |\n| Blocking function invocations per project | 2000 requests/minute |\n| `GetAccountInfo` per project\\* | 500,000 requests/minute |\n\n\\* Admin-only operations.\n\nThe `fetchProvidersForEmail()` and [`fetchSignInMethodsForEmail(email)`](https://firebase.google.com/docs/reference/js/auth.md#fetchsigninmethodsforemail) methods leverage the `createAuthURI` endpoint.\n\nToken Service API limits\n------------------------\n\n| Operation | Limit |\n|----------------------------|-------------------------|\n| Token exchange per project | 18,000 exchanges/minute |"]]
