Topic
Errors
Why a product error or blocked message appears, and how to diagnose it.
Guides
Articles
Step-by-step write-ups for this topic.
- Too many attempts — try again in about {seconds} secondsClient rate-limit countdown — auth.rateLimitSeconds with retryAfterSec.View article
- Too many authenticator attempts — try again laterLogin 2FA — rateLimitLogin2faByUser tripped (AUTH_RATE_LIMIT_TOTP).View article
- Too many captcha reloads — try again laterGET /api/captcha/challenge rate-limited — too many challenge reloads.View article
- Too many failed attempts — your IP has been bannedLogin IP auto-ban after failed password attempts (AUTH_LOGIN_IP_BANNED).View article
- Too many failed sign-in attempts — complete the captcha and try againLogin requires captcha after failures — captcha missing/failed (AUTH_RATE_LIMIT_LOGIN_CAPTCHA).View article
- Too many registration attempts — try again laterPOST /api/auth/register IP rate limit (AUTH_RATE_LIMIT_REGISTER).View article
- Too many requests — try again laterForgot-password / resend-verification rate limit (AUTH_RATE_LIMIT_PASSWORD_RESET).View article
- Too many SFTP admin requests — try again laterAdmin SFTP overview/revoke/restore/sessions APIs — 429 rate limit.View article
- Too many sign-in attempts — try again laterPassword login or OAuth start hit AUTH_RATE_LIMIT_LOGIN (429).View article
- Two-factor authentication is already enabledAccount 2FA setup/enable refused — twoFactorEnabled already true.View article
- Two-factor authentication is already enabled — sign in againMandatory 2FA setup — account already has twoFactorEnabled true.View article
- Two-factor authentication is disabled on this siteAccount 2FA setup/enable — isTotpAllowedOnSite false (403).View article
- Two-factor authentication is mandatory and cannot be disabledAccount Settings UI — canDisableTwoFactor false; Turn off blocked.View article
- Two-factor authentication is mandatory on this site and cannot be disabledPOST /api/account/2fa/disable — isTotpMandatoryOnSite true (403).View article
- Two-factor authentication is not active on this accountLogin 2FA step — user missing twoFactorSecret or twoFactorEnabled false.View article
- Two-factor authentication is required on this site — set up Google AuthenticatorLogin info after password — mandatory 2FA setup step required.View article
- Two-factor setup is not availableMandatory 2FA setup/confirm — TOTP not allowed or not mandatory (403).View article
- UnauthorizedGeneric 401 — missing/invalid internal auth, session, or API credentials.View article
- Unknown sign-in providerOAuth callback — provider path segment is not a known social provider.View article
- User not foundAPI looked up a user id/session that does not exist (404).View article