← All errors · SupabaseSupabase auth errors

AuthApiError: Invalid login credentials

Exact error

AuthApiError: Invalid login credentials

What it means

signInWithPassword was rejected: no user with that email/password combination could be authenticated.

Likely causes

• Wrong email or password.
• User signed up with OAuth or magic link and has no password.
• User exists in a different Supabase project (wrong URL/key).

How to fix it

1. Check the user exists in Dashboard → Authentication → Users for this project.

2. Offer a password reset:

   await supabase.auth.resetPasswordForEmail(email, { redirectTo: `${location.origin}/reset` });

3. Confirm your app's Supabase URL and anon key point to the expected project.

Prevent this next time

• Configure custom SMTP before launch so auth emails are not limited by the built-in test sender.
• Test signup, login, password reset and email confirmation on a staging project after every auth change.

Related errors

• AuthApiError: Email not confirmed
• Invalid JWT / JWT expired