invalid_credentials

Source: Kratos

HTTP: 400

Summary

Login credentials are invalid.

When this fires

Wrong password or unknown identifier.

Fix

Kratos deliberately doesn't distinguish 'wrong password' from 'no such user' to prevent enumeration. User retries or starts recovery.

Source code

Generated from the platform's error catalog. To find emit sites: grep -r "invalid_credentials" ../<repo>/src.