diff --git a/core/Controller/LostController.php b/core/Controller/LostController.php
index a0ef87e50d..8a8a50343e 100644
--- a/core/Controller/LostController.php
+++ b/core/Controller/LostController.php
@@ -202,6 +202,7 @@ class LostController extends Controller {
 
 	/**
 	 * @PublicPage
+	 * @BruteForceProtection passwordResetEmail
 	 *
 	 * @param string $user
 	 * @return array