Invalid master password #7025
Replies: 2 comments 5 replies
-
|
Be sure that you have configured the correct self-hosted URL and do not have anything like And, check if you see the login attempts in Vaultwarden when you try to login, if you do not see these, then something is wrong in between the clients and Vaultwarden. Since you can login via the web-vault there is nothing wrong with the account or the password. Else, provide more detailed logs of both Vaultwarden and the Clients. |
Beta Was this translation helpful? Give feedback.
-
|
So I've had similar issues today with the latest incarnation of the browser extension. It seems they have been changing the login API to use new PasswordPreloginApiService, PasswordPreloginService, DefaultPasswordPreloginService login strategies which was recently added to the auth elements of @bitwarden/common library code when they implemented 'Auth/PM-33353 - Password Login - refine prefetching of password prelogin data'. It seems that this new approach they have gone with basically ends up querying non-existent endpoints on Vaultwarden when it comes to password auth, which are all met with a 404. Also in trying to work out what happened here, there is a PR that looks like in all these auth changes they will remove and residual master password auth services too. |
Beta Was this translation helpful? Give feedback.
-
|
Could you elaborate on which browser and which version of the extension? |
Beta Was this translation helpful? Give feedback.
-
It seems to be working now I did a fresh install and removed / reinstalled the browser plugins |
Beta Was this translation helpful? Give feedback.
-
|
You probably hit the same issue as all the others |
Beta Was this translation helpful? Give feedback.
-
So I was using Brave, Ungoogled Chromium, normal Chromium, Helium (this is how I initially stumbled on this as it was a clean client install as I was trying out the browser) and also tested with Firefox + Tor Browser and all on Linux. I did notice something else, if the browser was clean i.e. new install without any history with a Vaultwarden or Bitwarden instance it failed for me every time. If the extension install was an upgrade and thus had an existing session or state with the vault warden doesn't have a problem until you need to login again with a password. I tried with v2026.3.0, v2026.2.0, v2026.1.1 and v2025.11.1 and v2025.10.1 everything prior to v2026.2.0 works without problem.. For me at least both v2026.3.0 or v2026.2.0 defaults the feature flag to enable the the new login flow and thus it fails.. |
Beta Was this translation helpful? Give feedback.
-
|
I have more or less the same problem, The only workaround I found now is to log out again and log back in with the e-mail |
Beta Was this translation helpful? Give feedback.
Uh oh!
There was an error while loading. Please reload this page.
-
Prerequisites
Vaultwarden Support String
I have created a fresh install and access via the web works perfectly but none of the browser extensions nor the mac app allow me to connect to my server, it just says invalid master password
Your environment (Generated via diagnostics page)
Config & Details (Generated via diagnostics page)
Show Config & Details
Environment settings which are overridden: DOMAIN, SIGNUPS_ALLOWED, ADMIN_TOKEN
Config:
{ "_duo_akey": null, "_enable_duo": true, "_enable_email_2fa": false, "_enable_smtp": true, "_enable_yubico": true, "_icon_service_csp": "", "_icon_service_url": "", "_ip_header_enabled": true, "_max_note_size": 10000, "_smtp_img_src": "***:", "admin_ratelimit_max_burst": 3, "admin_ratelimit_seconds": 300, "admin_session_lifetime": 20, "admin_token": "***", "allowed_connect_src": "", "allowed_iframe_ancestors": "", "attachments_folder": "data/attachments", "auth_request_purge_schedule": "30 * * * * *", "authenticator_disable_time_drift": false, "data_folder": "data", "database_conn_init": "", "database_idle_timeout": 600, "database_max_conns": 10, "database_min_conns": 2, "database_timeout": 30, "database_url": "***************", "db_connection_retries": 15, "disable_2fa_remember": false, "disable_admin_token": false, "disable_icon_download": false, "dns_prefer_ipv6": false, "domain": "*****://**************************", "domain_origin": "*****://**************************", "domain_path": "", "domain_set": true, "duo_context_purge_schedule": "30 * * * * *", "duo_host": null, "duo_ikey": null, "duo_skey": null, "duo_use_iframe": false, "email_2fa_auto_fallback": false, "email_2fa_enforce_on_verified_invite": false, "email_attempts_limit": 3, "email_change_allowed": true, "email_expiration_time": 600, "email_token_size": 6, "emergency_access_allowed": true, "emergency_notification_reminder_schedule": "0 3 * * * *", "emergency_request_timeout_schedule": "0 7 * * * *", "enable_db_wal": true, "enable_websocket": true, "enforce_single_org_with_reset_pw_policy": false, "event_cleanup_schedule": "0 10 0 * * *", "events_days_retain": null, "experimental_client_feature_flags": "", "extended_logging": true, "helo_name": null, "hibp_api_key": null, "http_request_block_non_global_ips": true, "http_request_block_regex": null, "icon_blacklist_non_global_ips": true, "icon_blacklist_regex": null, "icon_cache_folder": "data/icon_cache", "icon_cache_negttl": 259200, "icon_cache_ttl": 2592000, "icon_download_timeout": 10, "icon_redirect_code": 302, "icon_service": "internal", "incomplete_2fa_schedule": "30 * * * * *", "incomplete_2fa_time_limit": 3, "increase_note_size_limit": false, "invitation_expiration_hours": 120, "invitation_org_name": "StonewallMedia", "invitations_allowed": true, "ip_header": "X-Real-IP", "job_poll_interval_ms": 30000, "log_file": null, "log_level": "info", "log_timestamp_format": "%Y-%m-%d %H:%M:%S.%3f", "login_ratelimit_max_burst": 10, "login_ratelimit_seconds": 60, "org_attachment_limit": null, "org_creation_users": "", "org_events_enabled": false, "org_groups_enabled": false, "password_hints_allowed": true, "password_iterations": 600000, "purge_incomplete_sso_auth": "0 20 0 * * *", "push_enabled": false, "push_identity_uri": "https://identity.bitwarden.com", "push_installation_id": "***", "push_installation_key": "***", "push_relay_uri": "https://push.bitwarden.com", "reload_templates": false, "require_device_email": false, "rsa_key_filename": "data/rsa_key", "send_purge_schedule": "0 5 * * * *", "sendmail_command": null, "sends_allowed": true, "sends_folder": "data/sends", "show_password_hint": false, "signups_allowed": false, "signups_domains_whitelist": "", "signups_verify": false, "signups_verify_resend_limit": 6, "signups_verify_resend_time": 3600, "smtp_accept_invalid_certs": false, "smtp_accept_invalid_hostnames": false, "smtp_auth_mechanism": null, "smtp_debug": false, "smtp_embed_images": true, "smtp_explicit_tls": null, "smtp_from": "*************************", "smtp_from_name": "***********", "smtp_host": "************", "smtp_password": "***", "smtp_port": 587, "smtp_security": "starttls", "smtp_ssl": null, "smtp_timeout": 15, "smtp_username": "********************", "sso_allow_unknown_email_verification": false, "sso_audience_trusted": null, "sso_auth_only_not_session": false, "sso_authority": "", "sso_authorize_extra_params": "", "sso_callback_path": "*****://*******************************************************", "sso_client_cache_expiration": 0, "sso_client_id": "", "sso_client_secret": "***", "sso_debug_tokens": false, "sso_enabled": false, "sso_master_password_policy": null, "sso_only": false, "sso_pkce": true, "sso_scopes": "email profile", "sso_signups_match_email": true, "templates_folder": "data/templates", "tmp_folder": "data/tmp", "trash_auto_delete_days": null, "trash_purge_schedule": "0 5 0 * * *", "use_sendmail": false, "use_syslog": false, "user_attachment_limit": null, "user_send_limit": null, "web_vault_enabled": true, "web_vault_folder": "web-vault/", "yubico_client_id": null, "yubico_secret_key": null, "yubico_server": null }Vaultwarden Build Version
1.35.4
Deployment method
Official Container Image
Custom deployment method
No response
Reverse Proxy
ngpm 2.11.3
Host/Server Operating System
Linux
Operating System Version
No response
Clients
iOS, Browser Extension
Client Version
No response
Steps To Reproduce
1 - try to access browser extension
2 - ensure set to my self hsoted server
3 - get error invalid master password
Expected Result
Would expect it to log in, when accessing from the external domain it works fine it is a error between the bitwarden desktop app/browser extensions and the selfhosted server
Actual Result
Unable to connect
Logs
Screenshots or Videos
No response
Additional Context
No response
Beta Was this translation helpful? Give feedback.
All reactions