File is not password protected
POST /api/download/verify-access-password returned that this file has no access password (400).
Why this happens
The client sent a password check for a file with no accessPasswordHash — password was removed, wrong file id, or a stale password UI. Distinct from Incorrect password and Enter the file password.
Diagnose and fix
1. Refresh the download page — if there is no password gate, just Create download link.
2. Uploader: set a password again under edit file if the gate should appear.
3. API clients: only call verify when the file is actually password-protected.
4. No site-wide toggle causes this — it is per-file state.