Errors

Current password is incorrect

Account password change rejected — passwordOld did not match passwordHash.

Current password is incorrect

Changing password while signed in failed because the current password field did not match the stored hash (PATCH /api/account/profile when passwordNew is set and the account already has a password).

Why this happens

verifyPassword(passwordOld, user.passwordHash) returned false. Caps lock, wrong account, or a password that was changed elsewhere. Distinct from reset-link Could not update password and from file-password errors.

Diagnose and fix

1. Re-type the current password carefully; try again.

2. If forgotten, use Login and password reset (forgot password), then sign in with the new one.

3. Social-only accounts that never set a password follow a different “set password” path (no old password required until passwordSetAt exists).

4. Staff should not confuse this with Incorrect password on password-protected files.

Related