Master password invalid after domain change + image update #6674
-
Prerequisites
Vaultwarden Support String[2026-01-06 13:34:35.850][vaultwarden::api::identity][ERROR] Username or password is incorrect. Try again. IP: 58.251.23.66. Username: xxxxxx. Vaultwarden Build Version1.34.3 Deployment methodOfficial Container Image Custom deployment methodNo response Reverse Proxynginx 1.20 Host/Server Operating SystemNAS/SAN Operating System VersionNo response ClientsWeb Vault Client VersionNo response Steps To ReproduceRun Vaultwarden with existing data (Docker) Confirm login works on the original domain Change the public domain (via reverse proxy) Update Vaultwarden to the latest Docker image Restart container Attempt login with original master password Expected Resultreset the master password, or recover access to existing vault data? Actual ResultLogin fails Error: Invalid master password Existing vault data becomes inaccessible LogsScreenshots or VideosNo response Additional ContextThe master password was not changed The data directory was not deleted or reset Only the domain and image version were changed It is currently unclear whether domain binding, public URL, or encryption-related changes could cause this behavior |
Beta Was this translation helpful? Give feedback.
Replies: 2 comments 8 replies
-
|
Can you enable the Did you only restart the container or did you recreate it with the new image? Because the logs are still from
What do you mean by that? Why would you expect that? |
Beta Was this translation helpful? Give feedback.
-
Your environment (Generated via diagnostics page)
Config & Details (Generated via diagnostics page)Show Config & DetailsConfig: {
"_duo_akey": null,
"_enable_duo": true,
"_enable_email_2fa": false,
"_enable_smtp": true,
"_enable_yubico": true,
"_icon_service_csp": "",
"_icon_service_url": "",
"_ip_header_enabled": true,
"_max_note_size": 10000,
"_smtp_img_src": "***:",
"admin_ratelimit_max_burst": 3,
"admin_ratelimit_seconds": 300,
"admin_session_lifetime": 20,
"admin_token": "***",
"allowed_connect_src": "",
"allowed_iframe_ancestors": "",
"attachments_folder": "data/attachments",
"auth_request_purge_schedule": "30 * * * * *",
"authenticator_disable_time_drift": false,
"data_folder": "data",
"database_conn_init": "",
"database_idle_timeout": 600,
"database_max_conns": 10,
"database_min_conns": 2,
"database_timeout": 30,
"database_url": "***************",
"db_connection_retries": 15,
"disable_2fa_remember": false,
"disable_admin_token": false,
"disable_icon_download": false,
"dns_prefer_ipv6": false,
"domain": "*****://****************",
"domain_origin": "*****://****************",
"domain_path": "",
"domain_set": true,
"duo_context_purge_schedule": "30 * * * * *",
"duo_host": null,
"duo_ikey": null,
"duo_skey": null,
"duo_use_iframe": false,
"email_2fa_auto_fallback": false,
"email_2fa_enforce_on_verified_invite": false,
"email_attempts_limit": 3,
"email_change_allowed": true,
"email_expiration_time": 600,
"email_token_size": 6,
"emergency_access_allowed": true,
"emergency_notification_reminder_schedule": "0 3 * * * *",
"emergency_request_timeout_schedule": "0 7 * * * *",
"enable_db_wal": true,
"enable_websocket": true,
"enforce_single_org_with_reset_pw_policy": false,
"event_cleanup_schedule": "0 10 0 * * *",
"events_days_retain": null,
"experimental_client_feature_flags": "",
"extended_logging": true,
"helo_name": null,
"hibp_api_key": null,
"http_request_block_non_global_ips": true,
"http_request_block_regex": null,
"icon_blacklist_non_global_ips": true,
"icon_blacklist_regex": null,
"icon_cache_folder": "data/icon_cache",
"icon_cache_negttl": 259200,
"icon_cache_ttl": 2592000,
"icon_download_timeout": 10,
"icon_redirect_code": 302,
"icon_service": "internal",
"incomplete_2fa_schedule": "30 * * * * *",
"incomplete_2fa_time_limit": 3,
"increase_note_size_limit": false,
"invitation_expiration_hours": 120,
"invitation_org_name": "Vaultwarden",
"invitations_allowed": true,
"ip_header": "X-Real-IP",
"job_poll_interval_ms": 30000,
"log_file": null,
"log_level": "info",
"log_timestamp_format": "%Y-%m-%d %H:%M:%S.%3f",
"login_ratelimit_max_burst": 10,
"login_ratelimit_seconds": 60,
"org_attachment_limit": null,
"org_creation_users": "",
"org_events_enabled": false,
"org_groups_enabled": false,
"password_hints_allowed": true,
"password_iterations": 600000,
"purge_incomplete_sso_auth": "0 20 0 * * *",
"push_enabled": false,
"push_identity_uri": "https://identity.bitwarden.com",
"push_installation_id": "***",
"push_installation_key": "***",
"push_relay_uri": "https://push.bitwarden.com",
"reload_templates": false,
"require_device_email": false,
"rsa_key_filename": "data/rsa_key",
"send_purge_schedule": "0 5 * * * *",
"sendmail_command": null,
"sends_allowed": true,
"sends_folder": "data/sends",
"show_password_hint": false,
"signups_allowed": false,
"signups_domains_whitelist": "",
"signups_verify": false,
"signups_verify_resend_limit": 6,
"signups_verify_resend_time": 3600,
"smtp_accept_invalid_certs": false,
"smtp_accept_invalid_hostnames": false,
"smtp_auth_mechanism": null,
"smtp_debug": false,
"smtp_embed_images": true,
"smtp_explicit_tls": null,
"smtp_from": "",
"smtp_from_name": "***********",
"smtp_host": null,
"smtp_password": null,
"smtp_port": 587,
"smtp_security": "starttls",
"smtp_ssl": null,
"smtp_timeout": 15,
"smtp_username": null,
"sso_allow_unknown_email_verification": false,
"sso_audience_trusted": null,
"sso_auth_only_not_session": false,
"sso_authority": "",
"sso_authorize_extra_params": "",
"sso_callback_path": "*****://*********************************************",
"sso_client_cache_expiration": 0,
"sso_client_id": "",
"sso_client_secret": "***",
"sso_debug_tokens": false,
"sso_enabled": false,
"sso_master_password_policy": null,
"sso_only": false,
"sso_pkce": true,
"sso_scopes": "email profile",
"sso_signups_match_email": true,
"templates_folder": "data/templates",
"tmp_folder": "data/tmp",
"trash_auto_delete_days": null,
"trash_purge_schedule": "0 5 0 * * *",
"use_sendmail": false,
"use_syslog": false,
"user_attachment_limit": null,
"user_send_limit": null,
"web_vault_enabled": true,
"web_vault_folder": "web-vault/",
"yubico_client_id": null,
"yubico_secret_key": null,
"yubico_server": null
} |
Beta Was this translation helpful? Give feedback.
-
|
I just opened the admin page. I would like to recovery the password for my account |
Beta Was this translation helpful? Give feedback.
-
|
Master Password Reset (or Account Recovery as the feature is now called) is a feature of the Admin Console (for organization management) not the Vaultwarden Admin panel. Also you would have to enable and enroll your users into that policy to be able to reset their password. So this would not work in your case. |
Beta Was this translation helpful? Give feedback.
-
|
Is this related to the issue? Due to switching to a new domain, the Nginx configuration has been adjusted. |
Beta Was this translation helpful? Give feedback.
-
|
Only updated the Docker environment variable DOMIN, then redeployed. Nothing else was changed. |
Beta Was this translation helpful? Give feedback.
-
|
I change my domain often during testing, and never have issue with that. |
Beta Was this translation helpful? Give feedback.
-
|
The master password used by the local client can still unlock it. The hosted address is just a domain name and is no longer accessible. It's strange. |
Beta Was this translation helpful? Give feedback.
-
|
I've given up. I'll just create a new account and run the export and import process again. |
Beta Was this translation helpful? Give feedback.
I've given up. I'll just create a new account and run the export and import process again.