Troubleshooting Authentication

If you encounter errors or issues while authenticating with WHMCS, see the sections below to start troubleshooting and resolve the issue.

For more information about authenticating, see Authentication.

Authenticating with WHMCS

You may encounter the following common issues:

Error or IssueExplanationNext Steps
A user or admin reports frequent logouts.This issue may be due to PHP misconfiguration, proxy or CDN misconfiguration, or issues with the visitor’s IP address.Frequent Logouts
CloudFlare® Proxy Check Errors
When you attempt to log in, the system redirects you back to the login page without an error.
or
Invalid csrf protection token
This indicates an issue with PHP sessions on your server.Login Redirect Loops
You see an error when you attempt to accept an admin invitation.The invite link is expired or invalid.Expired Admin Invite Links
License InvalidYou entered an invalid license key or moved the WHMCS installation without updating the license.Invalid License Errors
Login Details Incorrect. Please try again.The WHMCS System URL setting does not match the URL that the user attempted to use to log in.Login Details Errors
Oops! Access Denied - ForbiddenEither the admin’s administrator role is missing the required permissions or an account owner has not set a password.Access Denied Forbidden Errors
WHMCS is running behind a CloudFlare proxy, but you have not configured proxy settings. This may cause login sessions to end prematurely. Click here to automatically reconfigure your CloudFlare proxy settings. (WHMCS 8.11 and later)
or
WHMCS may be operating behind a proxy or CDN, but you have not configured trusted proxy settings using CloudFlare IP addresses. This may cause login sessions to end prematurely. Apply settings now to correct this issue. (WHMCS 8.10 and earlier)
WHMCS detected that you are using CloudFlare, but there is a misconfiguration in your settings for trusted proxies.CloudFlare Proxy Check Errors Errors

Password Resets

You may encounter the following common issues:

Error or IssueExplanationNext Steps
The reset link you have followed is invalid. Please try again.The WHMCS System URL setting does not match the URL that the user attempted to use to access the password reset page.Invalid Reset Link Errors

Two-Factor Authentication

You may encounter the following common issues:

Error or IssueExplanationNext Steps
The code you entered did not match what was expected. Please try again. (Time-Based Tokens)
or
The second factor you supplied was incorrect. Please try again. You have 2 attempts remaining. (Duo Security in WHMCS 8.9 and later)
or
The second factor you supplied was incorrect. Please try again. (Duo Security in WHMCS 8.8 and earlier)
A server timezone misconfiguration or mismatch is preventing successful authentication.System Timezone Issues

Last modified: December 4, 2024