Signups still going through even with things disabled. #214

New Issue

MrUnknownDE · 2026-04-05T20:39:34+02:00

MrUnknownDE commented

2026-04-05 20:39:34 +02:00

Originally created by @lazy-media on 12/28/2025

Prerequisites

I have searched the existing Closed AND Open Issues AND Discussions
I have searched and read the documentation

Vaultwarden Support String

I want to hide and disable the Create Account link and form on the WebUI.

I have followed documentation on setting SIGNUPS_ALLOWED=false | SIGNUPS_DOMAIN_WHITELIST= [empty]

I do have SMTP enabled for emergency access, invitations or password resets. I shouldn't have to disable SMTP or try to implement a custom css to disable new account creations all together. This doesn't make sense to me when it should disable it using the docker environment variables.

I would expect that setting SIGNUPS_ALLOWED to false would disable that link, but when using an incognito window or even from another pc over a different internet connection, I always see the Create Account link and am able to send a new account signup link to an email every single time.

Vaultwarden Build Version

server:latest (1.35.0)

Deployment method

Official Container Image

Custom deployment method

docker image vaultwarden/server:latest
official docker environment variables used as stated in .env.template

Reverse Proxy

Authentik 2025.8.1

Host/Server Operating System

Linux

Operating System Version

No response

Clients

Web Vault

Client Version

No response

Steps To Reproduce

Edit Docker .env file to disable signups by setting SIGNUPS_ALLOWED=false & SIGNUPS_DOMAIN_WHITELIST=
Launch Docker Container with SMTP and Invitations Enabled
Open Browser and navigate to main login screen
Should not see Create account link, but do
Click on link, go through steps, everything still goes through and allows account creation and login.

Expected Result

Should not be able to create a new account, verify the email and then login to said account.

Actual Result

Allows what should not be allowed.

Logs

Screenshots or Videos

Additional Context

I do apologize if this is a repeated issue, but what I found did not match up to what I was experiencing.

*Originally created by @lazy-media on 12/28/2025* ### Prerequisites - [x] I have searched the existing **Closed _AND_ Open** [Issues](https://github.com/dani-garcia/vaultwarden/issues?q=is%3Aissue%20) **_AND_** [Discussions](https://github.com/dani-garcia/vaultwarden/discussions?discussions_q=) - [x] I have searched and read the [documentation](https://github.com/dani-garcia/vaultwarden/wiki/) ### Vaultwarden Support String I want to hide and disable the Create Account link and form on the WebUI. I have followed documentation on setting `SIGNUPS_ALLOWED=false` | `SIGNUPS_DOMAIN_WHITELIST= [empty]` I do have SMTP enabled for emergency access, invitations or password resets. I shouldn't have to disable SMTP or try to implement a custom css to disable new account creations all together. This doesn't make sense to me when it should disable it using the docker environment variables. I would expect that setting `SIGNUPS_ALLOWED` to `false` would disable that link, but when using an incognito window or even from another pc over a different internet connection, I always see the Create Account link and am able to send a new account signup link to an email every single time. ### Vaultwarden Build Version server:latest (1.35.0) ### Deployment method Official Container Image ### Custom deployment method docker image `vaultwarden/server:latest` official docker environment variables used as stated in `.env.template` ### Reverse Proxy Authentik 2025.8.1 ### Host/Server Operating System Linux ### Operating System Version _No response_ ### Clients Web Vault ### Client Version _No response_ ### Steps To Reproduce 1. Edit Docker `.env` file to disable signups by setting `SIGNUPS_ALLOWED=false` & `SIGNUPS_DOMAIN_WHITELIST=` 2. Launch Docker Container with SMTP and Invitations Enabled 3. Open Browser and navigate to main login screen 4. Should not see `Create account` link, but do 5. Click on link, go through steps, everything still goes through and allows account creation and login. ### Expected Result Should not be able to create a new account, verify the email and then login to said account. ### Actual Result Allows what should not be allowed. ### Logs ```text ``` ### Screenshots or Videos <img width="573" height="114" alt="Image" src="https://github.com/user-attachments/assets/9a403fa3-aadf-4e7b-97ac-5ead10294582" /> <img width="448" height="755" alt="Image" src="https://github.com/user-attachments/assets/76cc6c2e-a944-44b0-889c-324548940eab" /> <img width="448" height="756" alt="Image" src="https://github.com/user-attachments/assets/52158fa0-e7ad-4a01-9249-19b5c16d8dfa" /> <img width="448" height="762" alt="Image" src="https://github.com/user-attachments/assets/f42c634f-187f-441c-9633-4aec53414ac1" /> ### Additional Context I do apologize if this is a repeated issue, but what I found did not match up to what I was experiencing.

MrUnknownDE closed this issue

2026-04-05 20:39:34 +02:00

MrUnknownDE added the bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug labels 2026-04-05 20:39:45 +02:00

Sign in to join this conversation.

No Label bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/vaultwarden#214