Supabase Auth: invalid_credentials
Supabase returns invalid_credentials when the login credentials or grant type aren't recognized: wrong email/password, a user who signed up with OAuth trying a password, or a client pointed at the wrong project. Check the user exists in this project with the provider you're using.
Cause: Credentials don't match a user/provider in the Supabase project the client is connected to.
How to fix it
- Confirm the client's Supabase URL/anon key point to the same project where the user exists.
- Check the user's provider in Authentication > Users (email vs Google, etc.).
- Offer password reset for email users.
- Don't reveal which part was wrong in your UI message.
Example
Illustrative example, not from a customer project.
- VITE_SUPABASE_URL=https://old-project.supabase.co
+ VITE_SUPABASE_URL=https://prod-project.supabase.co
FAQ
It works locally but not in production.
Production may point at a different Supabase project with different users.
Can an unconfirmed email cause this?
That usually shows as email_not_confirmed instead.
Get a $149 diagnosis See pricing Still exposed or still logged out? Get an auth & database security fix (Supabase, Firebase).
- Fixed, or we keep working free until it is (within the written scope).
- A human reviews every fix before it ships.
- read-only access; fixes arrive as pull requests you merge
- Your $149 diagnosis is credited in full toward any paid job.