Cannot sign in: wrong password, pending invitation, deactivated account or a rejected code
The sign-in form, the two-factor step or a password form refuses you: what each message means, the rule behind it and how to get back in.
Messages this explains
- “The email or password is incorrect.”
- “This account has a pending invitation. Open the invitation email to set a password first.”
- “This account has been deactivated”
- “Your organization has been deactivated. Contact support.”
- “Your session ended. Please sign in again.”
- “Enter the 6-digit code or a backup code”
- “That code is too long”
- “That code is not valid. Check your authenticator app and try again.”
- “That code was already used. Wait for the next one and try again.”
- “The sign-in step expired. Enter your password again.”
- “Signed in with a backup code. <n> backup codes left.”
- “The current password is incorrect.”
- “The password is incorrect.”
- “Use at least 8 characters”
- “Include at least one letter and one digit”
- “Password is too long (max 72 bytes)”
- “Passwords do not match”
Cannot sign in: wrong password, pending invitation, deactivated account or a rejected code
What you see
On Sign in, a red banner above the form:
- "The email or password is incorrect."
- "This account has a pending invitation. Open the invitation email to set a password first."
- "This account has been deactivated"
- "Your organization has been deactivated. Contact support."
A message that starts "Verify your email address to sign in." has its own article: Sign-in refused: verify your email address.
A blue notice on the same page: "Your session ended. Please sign in again." You were brought back here from inside the app.
On the Two-factor sign-in step, under the code field:
- "Enter the 6-digit code or a backup code" (the field is empty or too short)
- "That code is too long"
- "That code is not valid. Check your authenticator app and try again."
- "That code was already used. Wait for the next one and try again."
The step can also send you back to the password form with the notice "The sign-in step expired. Enter your password again." After signing in with a backup code a toast says "Signed in with a backup code. N backup codes left." (shown as a warning when 2 or fewer remain).
On My Profile:
- Under Current password on the change-password form: "The current password is incorrect."
- In the Regenerate backup codes and Disable two-factor authentication dialogs: "The password is incorrect."
Under a new-password field (change password, reset password, accept invitation or create an organization): "Use at least 8 characters", "Include at least one letter and one digit", "Password is too long (max 72 bytes)"; under the confirmation field: "Passwords do not match".
Why it happens
- Wrong email or password. The app never says which of the two is wrong, so that nobody can use the sign-in form to find out which emails have accounts. Every failed attempt is recorded in the audit trail.
- Pending invitation. An invited user has no password until they open the invitation link and choose one; the sign-in form cannot do that for them.
- Deactivated account. An administrator deactivated the user under Settings > Users. The moment that happens, every open session of that user ends too.
- Deactivated organization. The whole organization has been switched off; no user in it can sign in.
- Session ended. Your sign-in token is no longer valid: it ran out after a day without using NirmaanOne, your password was changed or reset (which ends every other session of your account), you used Sign out everywhere on another device, an administrator reset your two-factor authentication, or your account was deactivated. The app sends you back to sign in and returns you to the page you were on.
- Two-factor codes. A code is six digits from your authenticator app, valid for its 30-second window (the app also accepts the code just before and just after). Each code works once: using the same code twice gives "That code was already used". A backup code is one of the 10 single-use codes shown when you enabled two-factor authentication (written like XXXX-XXXX). The code step must be completed within 5 minutes of entering your password; after that you start again from the password.
- Password rules. A password needs at least 8 characters with a letter and a digit, and can be at most 72 bytes long. Changing your password, regenerating backup codes and disabling two-factor authentication all ask for your current password so that someone at an unlocked screen cannot do them for you.
How to fix it
- Wrong email or password. Check the email (it is your sign-in name, there is no username) and try again. If you have forgotten the password, use Forgot password? to open Forgot password; the reset link is valid for one hour.
- Pending invitation. Open the link in your invitation email and choose a password on Accept invitation. If the link has expired, an administrator with the Edit permission on Users presses Resend invitation on Users; see Invitation, verification or password-reset link cannot be used.
- Deactivated account. Ask an administrator to press Reactivate on your row under Users (the Edit permission on Users).
- Deactivated organization. Contact support; nothing inside the app can reverse this.
- Session ended. Sign in again. If it keeps happening right after you sign in, your account may have been deactivated: check with an administrator.
- Code not valid. Make sure your phone's clock is set automatically (a clock that is off by more than about half a minute produces codes the app rejects), wait for a fresh code and enter it without spaces. If the app is gone, press Use a backup code instead and enter one of your backup codes. When you are running out of backup codes, regenerate them under Two-factor authentication on My Profile. If you have lost both the app and every backup code, ask an administrator to reset your two-factor authentication (see Reset a user's two-factor authentication); if you are the only administrator, contact NirmaanOne support.
- Code already used. Wait for the authenticator to show the next code and enter that one.
- Sign-in step expired. Enter your email and password again and complete the code step within 5 minutes.
- Password rejected. Type a password of at least 8 characters that contains both a letter and a digit, keep it under 72 bytes, and type the same value in the confirmation field.
Related
Related
- Sign inScreen
Sign in to NirmaanOne with your email and password, and with a 6-digit code or a backup code when your account has two-factor authentication.
- Two-factor sign-inScreen
Turn on two-factor authentication with an authenticator app, sign in with a 6-digit code or a backup code, manage your backup codes, and what happens when your organization requires it.
- My ProfileScreen
Your own account: see your email, organization and roles, change your name and phone, change your password, turn two-factor authentication on or off, and sign out everywhere.
- Forgot your password?Screen
Ask for a password reset link by email when you can't remember your password.
- Join <organization> (Accept invitation)Screen
The page the invitation email opens: choose your password and join the organization that invited you, with the role the administrator gave you.
- UsersScreen
The people in your organization: invite new users, change their role, deactivate or reactivate them, reset a lost two-factor authentication, and resend or revoke pending invitations.
- Invitation, verification or password-reset link cannot be usedTroubleshooting
A link from an email opens a page that says it is incomplete, invalid, expired or already used: how long each kind of link lives, what makes it stop working and how to get a new one.
- Pages refuse to load data: your organization requires two-factor authenticationTroubleshooting
A red banner says most pages will refuse to load data, dashboard sections fail and every list shows the same message: the organization now requires two-factor authentication and your account has not set it up yet.
- Sign-in refused: verify your email addressTroubleshooting
Your email address was still not verified 30 days after your account was created, so NirmaanOne refuses sign-in and stops AI connections until you open a verification link.
- Reset a user's two-factor authenticationHow-to
When a user has lost both their authenticator app and their backup codes, an administrator resets their two-factor authentication from Settings > Users so they can sign in again with their password.