diff --git a/setup/flavors/compose/mailu.env b/setup/flavors/compose/mailu.env
index fd95b725..60516013 100644
--- a/setup/flavors/compose/mailu.env
+++ b/setup/flavors/compose/mailu.env
@@ -34,7 +34,7 @@ TLS_FLAVOR={{ tls_flavor }}
 AUTH_RATELIMIT_IP={{ auth_ratelimit_ip }}/hour
 {% endif %}
 
-# Authentication rate limit per user (per /24 on ipv4 and /56 on ipv6)
+# Authentication rate limit per user (regardless of the source-IP)
 {% if auth_ratelimit_user > '0' %}
 AUTH_RATELIMIT_USER={{ auth_ratelimit_user }}/day
 {% endif %}
diff --git a/setup/templates/steps/config.html b/setup/templates/steps/config.html
index 4b4bb281..74a45800 100644
--- a/setup/templates/steps/config.html
+++ b/setup/templates/steps/config.html
@@ -48,7 +48,7 @@ Or in plain english: if receivers start to classify your mail as spam, this post
 </div>
 
 <div class="form-group">
-  <label>Authentication rate limit per IP for failed login attempts for non-existing accounts</label>
+  <label>Authentication rate limit per IP for failed login attempts or non-existing accounts</label>
   <!--   Validates number input only -->
   <p><input class="form-control" style="width: 9%; display: inline;" type="number" name="auth_ratelimit_ip"
   		value="60" required > / hour
@@ -56,7 +56,7 @@ Or in plain english: if receivers start to classify your mail as spam, this post
 </div>
 
 <div class="form-group">
-  <label>Authentication rate limit per user for failed login attempts for existing accounts</label>
+  <label>Authentication rate limit per user</label>
   <!--   Validates number input only -->
   <p><input class="form-control" style="width: 9%; display: inline;" type="number" name="auth_ratelimit_user"
   		value="100" required > / day