Master password invalid after domain change + image update #178

New Issue

MrUnknownDE · 2026-04-05T20:34:58+02:00

MrUnknownDE commented

2026-04-05 20:34:58 +02:00

Originally created by @citrusjunoss on 1/6/2026

Prerequisites

I have searched the existing Closed AND Open Issues AND Discussions
I have searched and read the documentation

Vaultwarden Support String

[2026-01-06 13:34:35.850][vaultwarden::api::identity][ERROR] Username or password is incorrect. Try again. IP: 58.251.23.66. Username: xxxxxx.
[2026-01-06 13:34:35.850][response][INFO] (login) POST /identity/connect/token => 400 Bad Request
[2026-01-06 13:38:03.983][request][INFO] POST /identity/accounts/register/send-verification-email
[2026-01-06 13:38:03.989][vaultwarden::api::identity][ERROR] Registration not allowed or user already exists
[2026-01-06 13:38:03.989][response][INFO] (register_verification_email) POST /identity/accounts/register/send-verification-email => 400 Bad Request
[2026-01-06 13:50:12.208][request][INFO] GET /admin/diagnostics
[2026-01-06 13:50:12.209][response][INFO] (web_files) GET /<p..> [10] => 404 Not Found
[2026-01-06 13:50:13.368][vaultwarden::api::web][ERROR] Static file not found: bootstrap.css.map

Vaultwarden Build Version

1.34.3

Deployment method

Official Container Image

Custom deployment method

No response

Reverse Proxy

nginx 1.20

Host/Server Operating System

NAS/SAN

Operating System Version

No response

Clients

Web Vault

Client Version

No response

Steps To Reproduce

Run Vaultwarden with existing data (Docker)

Confirm login works on the original domain

Change the public domain (via reverse proxy)

Update Vaultwarden to the latest Docker image

Restart container

Attempt login with original master password

Expected Result

reset the master password, or

recover access to existing vault data?

Actual Result

Login fails

Error: Invalid master password

Existing vault data becomes inaccessible

Logs

/--------------------------------------------------------------------\
|                        Starting Vaultwarden                        |
|                           Version 1.34.3                           |
|--------------------------------------------------------------------|
| This is an *unofficial* Bitwarden implementation, DO NOT use the   |
| official channels to report bugs/features, regardless of client.   |
| Send usage/configuration questions or feature requests to:         |
|   https://github.com/dani-garcia/vaultwarden/discussions or        |
|   https://vaultwarden.discourse.group/                             |
| Report suspected bugs/issues in the software itself at:            |
|   https://github.com/dani-garcia/vaultwarden/issues/new            |
\--------------------------------------------------------------------/
[2026-01-06 13:27:44.864][start][INFO] Rocket has launched from http://0.0.0.0:80
[2026-01-06 13:29:54.869][request][INFO] GET /api/config
[2026-01-06 13:29:54.886][response][INFO] (config) GET /api/config => 200 OK
[2026-01-06 13:30:34.503][request][INFO] GET /api/config
[2026-01-06 13:30:34.503][response][INFO] (config) GET /api/config => 200 OK
[2026-01-06 13:30:45.243][request][INFO] GET /api/devices/knowndevice
[2026-01-06 13:30:45.282][response][INFO] (get_known_device) GET /api/devices/knowndevice => 200 OK
[2026-01-06 13:30:51.358][request][INFO] POST /identity/accounts/prelogin
[2026-01-06 13:30:51.363][response][INFO] (prelogin) POST /identity/accounts/prelogin => 200 OK
[2026-01-06 13:30:52.590][request][INFO] POST /identity/connect/token
[2026-01-06 13:30:52.607][vaultwarden::api::identity][ERROR] Username or password is incorrect. Try again. IP: 58.251.23.66. Username: xxxxxxxxxx.
[2026-01-06 13:30:52.608][response][INFO] (login) POST /identity/connect/token => 400 Bad Request
[2026-01-06 13:31:35.839][request][INFO] POST /identity/accounts/prelogin
[2026-01-06 13:31:35.840][response][INFO] (prelogin) POST /identity/accounts/prelogin => 200 OK
[2026-01-06 13:31:36.939][request][INFO] POST /identity/connect/token
[2026-01-06 13:31:36.940][vaultwarden::api::identity][ERROR] Username or password is incorrect. Try again. IP: 58.251.23.66. Username: xxxxxxxxxxx.
[2026-01-06 13:31:36.940][response][INFO] (login) POST /identity/connect/token => 400 Bad Request
[2026-01-06 13:31:48.477][request][INFO] GET /api/devices/knowndevice
[2026-01-06 13:31:48.478][response][INFO] (get_known_device) GET /api/devices/knowndevice => 200 OK
[2026-01-06 13:31:55.115][request][INFO] POST /identity/accounts/prelogin
[2026-01-06 13:31:55.116][response][INFO] (prelogin) POST /identity/accounts/prelogin => 200 OK
[2026-01-06 13:31:55.386][request][INFO] POST /identity/connect/token
[2026-01-06 13:31:55.387][vaultwarden::api::identity][ERROR] Username or password is incorrect. Try again. IP: 58.251.23.66. Username: xxxxxxxx.
[2026-01-06 13:31:55.387][response][INFO] (login) POST /identity/connect/token => 400 Bad Request
[2026-01-06 13:33:58.668][request][INFO] GET /api/devices/knowndevice
[2026-01-06 13:33:58.669][response][INFO] (get_known_device) GET /api/devices/knowndevice => 200 OK
[2026-01-06 13:34:35.489][request][INFO] POST /identity/accounts/prelogin
[2026-01-06 13:34:35.491][response][INFO] (prelogin) POST /identity/accounts/prelogin => 200 OK
[2026-01-06 13:34:35.849][request][INFO] POST /identity/connect/token
[2026-01-06 13:34:35.850][vaultwarden::api::identity][ERROR] Username or password is incorrect. Try again. IP: 58.251.23.66. Username: xxxxxxx.
[2026-01-06 13:34:35.850][response][INFO] (login) POST /identity/connect/token => 400 Bad Request
[2026-01-06 13:38:03.983][request][INFO] POST /identity/accounts/register/send-verification-email
[2026-01-06 13:38:03.989][vaultwarden::api::identity][ERROR] Registration not allowed or user already exists
[2026-01-06 13:38:03.989][response][INFO] (register_verification_email) POST /identity/accounts/register/send-verification-email => 400 Bad Request
[2026-01-06 13:50:12.208][request][INFO] GET /admin/diagnostics
[2026-01-06 13:50:12.209][response][INFO] (web_files) GET /<p..> [10] => 404 Not Found
[2026-01-06 13:50:13.368][vaultwarden::api::web][ERROR] Static file not found: bootstrap.css.map

Screenshots or Videos

No response

Additional Context

The master password was not changed

The data directory was not deleted or reset

Only the domain and image version were changed

It is currently unclear whether domain binding, public URL, or encryption-related changes could cause this behavior

*Originally created by @citrusjunoss on 1/6/2026* ### Prerequisites - [x] I have searched the existing **Closed _AND_ Open** [Issues](https://github.com/dani-garcia/vaultwarden/issues?q=is%3Aissue%20) **_AND_** [Discussions](https://github.com/dani-garcia/vaultwarden/discussions?discussions_q=) - [x] I have searched and read the [documentation](https://github.com/dani-garcia/vaultwarden/wiki/) ### Vaultwarden Support String [2026-01-06 13:34:35.850][vaultwarden::api::identity][ERROR] Username or password is incorrect. Try again. IP: 58.251.23.66. Username: xxxxxx. [2026-01-06 13:34:35.850][response][INFO] (login) POST /identity/connect/token => 400 Bad Request [2026-01-06 13:38:03.983][request][INFO] POST /identity/accounts/register/send-verification-email [2026-01-06 13:38:03.989][vaultwarden::api::identity][ERROR] Registration not allowed or user already exists [2026-01-06 13:38:03.989][response][INFO] (register_verification_email) POST /identity/accounts/register/send-verification-email => 400 Bad Request [2026-01-06 13:50:12.208][request][INFO] GET /admin/diagnostics [2026-01-06 13:50:12.209][response][INFO] (web_files) GET /<p..> [10] => 404 Not Found [2026-01-06 13:50:13.368][vaultwarden::api::web][ERROR] Static file not found: bootstrap.css.map ### Vaultwarden Build Version 1.34.3 ### Deployment method Official Container Image ### Custom deployment method _No response_ ### Reverse Proxy nginx 1.20 ### Host/Server Operating System NAS/SAN ### Operating System Version _No response_ ### Clients Web Vault ### Client Version _No response_ ### Steps To Reproduce Run Vaultwarden with existing data (Docker) Confirm login works on the original domain Change the public domain (via reverse proxy) Update Vaultwarden to the latest Docker image Restart container Attempt login with original master password ### Expected Result reset the master password, or recover access to existing vault data? ### Actual Result Login fails Error: Invalid master password Existing vault data becomes inaccessible ### Logs ```text /--------------------------------------------------------------------\ | Starting Vaultwarden | | Version 1.34.3 | |--------------------------------------------------------------------| | This is an *unofficial* Bitwarden implementation, DO NOT use the | | official channels to report bugs/features, regardless of client. | | Send usage/configuration questions or feature requests to: | | https://github.com/dani-garcia/vaultwarden/discussions or | | https://vaultwarden.discourse.group/ | | Report suspected bugs/issues in the software itself at: | | https://github.com/dani-garcia/vaultwarden/issues/new | \--------------------------------------------------------------------/ [2026-01-06 13:27:44.864][start][INFO] Rocket has launched from http://0.0.0.0:80 [2026-01-06 13:29:54.869][request][INFO] GET /api/config [2026-01-06 13:29:54.886][response][INFO] (config) GET /api/config => 200 OK [2026-01-06 13:30:34.503][request][INFO] GET /api/config [2026-01-06 13:30:34.503][response][INFO] (config) GET /api/config => 200 OK [2026-01-06 13:30:45.243][request][INFO] GET /api/devices/knowndevice [2026-01-06 13:30:45.282][response][INFO] (get_known_device) GET /api/devices/knowndevice => 200 OK [2026-01-06 13:30:51.358][request][INFO] POST /identity/accounts/prelogin [2026-01-06 13:30:51.363][response][INFO] (prelogin) POST /identity/accounts/prelogin => 200 OK [2026-01-06 13:30:52.590][request][INFO] POST /identity/connect/token [2026-01-06 13:30:52.607][vaultwarden::api::identity][ERROR] Username or password is incorrect. Try again. IP: 58.251.23.66. Username: xxxxxxxxxx. [2026-01-06 13:30:52.608][response][INFO] (login) POST /identity/connect/token => 400 Bad Request [2026-01-06 13:31:35.839][request][INFO] POST /identity/accounts/prelogin [2026-01-06 13:31:35.840][response][INFO] (prelogin) POST /identity/accounts/prelogin => 200 OK [2026-01-06 13:31:36.939][request][INFO] POST /identity/connect/token [2026-01-06 13:31:36.940][vaultwarden::api::identity][ERROR] Username or password is incorrect. Try again. IP: 58.251.23.66. Username: xxxxxxxxxxx. [2026-01-06 13:31:36.940][response][INFO] (login) POST /identity/connect/token => 400 Bad Request [2026-01-06 13:31:48.477][request][INFO] GET /api/devices/knowndevice [2026-01-06 13:31:48.478][response][INFO] (get_known_device) GET /api/devices/knowndevice => 200 OK [2026-01-06 13:31:55.115][request][INFO] POST /identity/accounts/prelogin [2026-01-06 13:31:55.116][response][INFO] (prelogin) POST /identity/accounts/prelogin => 200 OK [2026-01-06 13:31:55.386][request][INFO] POST /identity/connect/token [2026-01-06 13:31:55.387][vaultwarden::api::identity][ERROR] Username or password is incorrect. Try again. IP: 58.251.23.66. Username: xxxxxxxx. [2026-01-06 13:31:55.387][response][INFO] (login) POST /identity/connect/token => 400 Bad Request [2026-01-06 13:33:58.668][request][INFO] GET /api/devices/knowndevice [2026-01-06 13:33:58.669][response][INFO] (get_known_device) GET /api/devices/knowndevice => 200 OK [2026-01-06 13:34:35.489][request][INFO] POST /identity/accounts/prelogin [2026-01-06 13:34:35.491][response][INFO] (prelogin) POST /identity/accounts/prelogin => 200 OK [2026-01-06 13:34:35.849][request][INFO] POST /identity/connect/token [2026-01-06 13:34:35.850][vaultwarden::api::identity][ERROR] Username or password is incorrect. Try again. IP: 58.251.23.66. Username: xxxxxxx. [2026-01-06 13:34:35.850][response][INFO] (login) POST /identity/connect/token => 400 Bad Request [2026-01-06 13:38:03.983][request][INFO] POST /identity/accounts/register/send-verification-email [2026-01-06 13:38:03.989][vaultwarden::api::identity][ERROR] Registration not allowed or user already exists [2026-01-06 13:38:03.989][response][INFO] (register_verification_email) POST /identity/accounts/register/send-verification-email => 400 Bad Request [2026-01-06 13:50:12.208][request][INFO] GET /admin/diagnostics [2026-01-06 13:50:12.209][response][INFO] (web_files) GET /<p..> [10] => 404 Not Found [2026-01-06 13:50:13.368][vaultwarden::api::web][ERROR] Static file not found: bootstrap.css.map ``` ### Screenshots or Videos _No response_ ### Additional Context The master password was not changed The data directory was not deleted or reset Only the domain and image version were changed It is currently unclear whether domain binding, public URL, or encryption-related changes could cause this behavior

MrUnknownDE closed this issue

2026-04-05 20:34:58 +02:00

MrUnknownDE added the bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug labels 2026-04-05 20:35:07 +02:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/vaultwarden#178