diff --git a/apps/studio/components/interfaces/Auth/BasicAuthSettingsForm/BasicAuthSettingsForm.tsx b/apps/studio/components/interfaces/Auth/BasicAuthSettingsForm/BasicAuthSettingsForm.tsx
index 23d01a45de6..f9a44561ca4 100644
--- a/apps/studio/components/interfaces/Auth/BasicAuthSettingsForm/BasicAuthSettingsForm.tsx
+++ b/apps/studio/components/interfaces/Auth/BasicAuthSettingsForm/BasicAuthSettingsForm.tsx
@@ -34,6 +34,7 @@ import { IS_PLATFORM } from 'lib/constants'
import Link from 'next/link'
import { WarningIcon } from 'ui-patterns/Icons/StatusIcons'
import FormField from '../AuthProvidersForm/FormField'
+import { ExternalLink } from 'lucide-react'
// Use a const string to represent no chars option. Represented as empty string on the backend side.
const NO_REQUIRED_CHARACTERS = 'NO_REQUIRED_CHARS'
@@ -233,17 +234,30 @@ const BasicAuthSettingsForm = () => {
Anonymous users will use the{' '}
+ As a result, anonymous users will be subjected to RLS policies that
+ apply to the authenticated role when signing in
- public and{' '}
- authenticated roles. We strongly advise{' '}
-
+ public and{' '}
+ authenticated roles. We strongly
+ advise{' '}
+
+ reviewing your RLS policies
+ {' '}
+ to ensure that access to your data is restricted where required.
+
Number of OTP/Magic link verifications that can be made in a 5 minute - interval + interval per IP address.
} > @@ -349,7 +350,7 @@ const RateLimits = () => {