diff --git a/CHANGELOG.md b/CHANGELOG.md
index 97e86938..e1e64988 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -23,6 +23,7 @@ If you are upgrading from v0.16.x, replace the binary (or run `docker pull`). If
 - Branding: Custom logos for domains do not work.
 - Sieve: add `Received` headers to auto-generated messages and detect loops.
 - MTA: Resume queue processing does not work.
+- Misconfigured in-memory store cannot be recovered in recovery mode.
 
 ## [0.16.12] - 2026-07-06
 
diff --git a/crates/common/src/config/network.rs b/crates/common/src/config/network.rs
index 4d741d80..4097971c 100644
--- a/crates/common/src/config/network.rs
+++ b/crates/common/src/config/network.rs
@@ -445,8 +445,16 @@ impl Http {
             },
             allowed_endpoint: bp
                 .compile_expr(ObjectType::Http.singleton(), &http.ctx_allowed_endpoints()),
-            rate_authenticated: http.rate_limit_authenticated,
-            rate_anonymous: http.rate_limit_anonymous,
+            rate_authenticated: if bp.registry.is_recovery_mode() {
+                None
+            } else {
+                http.rate_limit_authenticated
+            },
+            rate_anonymous: if bp.registry.is_recovery_mode() {
+                None
+            } else {
+                http.rate_limit_anonymous
+            },
             response_headers: http_headers,
             use_forwarded: http.use_x_forwarded,
             redirect_root: http.redirect_root,