Error library

Supabase Auth: invalid_credentials

Supabase returns invalid_credentials when the login credentials or grant type aren't recognized: wrong email/password, a user who signed up with OAuth trying a password, or a client pointed at the wrong project. Check the user exists in this project with the provider you're using.

Cause: Credentials don't match a user/provider in the Supabase project the client is connected to.

How to fix it

  1. Confirm the client's Supabase URL/anon key point to the same project where the user exists.
  2. Check the user's provider in Authentication > Users (email vs Google, etc.).
  3. Offer password reset for email users.
  4. Don't reveal which part was wrong in your UI message.

Example

Illustrative example, not from a customer project.

- VITE_SUPABASE_URL=https://old-project.supabase.co
+ VITE_SUPABASE_URL=https://prod-project.supabase.co

FAQ

It works locally but not in production.

Production may point at a different Supabase project with different users.

Can an unconfirmed email cause this?

That usually shows as email_not_confirmed instead.

Get a $149 diagnosis See pricing Still exposed or still logged out? Get an auth & database security fix (Supabase, Firebase).

$149Get a $149 diagnosis