diff --git a/backend/src/server/config/rateLimiter.ts b/backend/src/server/config/rateLimiter.ts
index 0f6903773..dfecfb495 100644
--- a/backend/src/server/config/rateLimiter.ts
+++ b/backend/src/server/config/rateLimiter.ts
@@ -56,7 +56,6 @@ export const mfaRateLimit: RateLimitOptions = {
   timeWindow: 60 * 1000,
   max: 20,
   keyGenerator: (req) => {
-    // fallback to IP to avoid global rate limiting when authorization is set to empty
     return req.headers.authorization?.split(" ")[1] || req.realIp;
   }
 };