diff --git a/offline-backend-20260512/backend/app/gateway/routers/auth.py b/offline-backend-20260512/backend/app/gateway/routers/auth.py
index 22951c3a..c6807432 100644
--- a/offline-backend-20260512/backend/app/gateway/routers/auth.py
+++ b/offline-backend-20260512/backend/app/gateway/routers/auth.py
@@ -336,7 +336,7 @@ def _set_session_cookie(response: Response, token: str, request: Request) -> Non
 # production multi-worker setups, replace this with a shared store (Redis,
 # database-backed counter) to enforce a true per-IP limit.
 
-_MAX_LOGIN_ATTEMPTS = 5
+_MAX_LOGIN_ATTEMPTS = 100
 _LOCKOUT_SECONDS = 300  # 5 minutes
 
 # ip → (fail_count, lock_until_timestamp)