Invalid login or password
Overview
While attempting to sign into GitLab, you receive the message: "Invalid login or password."
Impacted offerings:
- GitLab.com
- GitLab Dedicated
- GitLab Self-Managed
Resolution
A few different factors could cause this message. The following are common solutions for this issue.
Invalid login using email
There are several options if using an email to sign in:
- Try using your GitLab username instead of email.
- If you have multiple email addresses associated with your account, try one of the other accounts. Only the primary email can be used for authentication.
- If you use dynamic email sub-addressing (eg:
example+gitlab@example.com
), confirm you are using the right sub-address. You can search your inbox for emails from GitLab, which would be addressed to your GitLab account's associated email.
Invalid login using username
- Verify there are no typos in your username.
- If you are uncertain of your username, consider signing in with the primary email address linked to your account.
Verify GitLab domain
Ensure you are accessing GitLab from the correct URL. For example, credentials for a self-managed installation of GitLab, will not work on gitlab.com. This can also happen with multiple instances of GitLab, such as, staging and production environments.
Tools such as password managers will automatically fill your credentials when visiting associated pages. If your password manager isn't returning a result on the sign-in page, double-check the URL is correct.
Warning: If you discover that you entered credentials at the wrong domain, reset your password immediately after authenticating to your instance.
Reset password
If you are certain your username / email are correct, the password may be incorrect.
If you cannot login after resetting your password, double-check you are using the right username or primary email.
GitLab.com
Users can reset their passwords at https://gitlab.com/users/password/new
Self-managed and Dedicated
Users can reset their passwords by selecting "Forgot your password?" on the sign-in page.
For additional assistance, a GitLab administrator can reset user passwords.
Cause
The combination of authentication values sent to the server are not correct. This could include:
- Using a secondary email instead of the primary email.
- Incorrect username or email.
- Incorrect password.
- Incorrect GitLab domain.
Additional information
Verified secondary emails can request a password reset but can't be used for sign-in.
Too many failed login attempts may lock your account. The lock duration varies by environment: