[GH-ISSUE #4983] fresh install from docker bug with capitalize letters in email #3083

Open
opened 2026-02-26 07:37:47 +03:00 by kerem · 2 comments
Owner

Originally created by @grand-lotus-iroh on GitHub (Nov 23, 2025).
Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/4983

If you type in email with capital letter, you get error

"Invalid email or password"

and than it redirects and is broken and you must remove and redeploy with docker command

Originally created by @grand-lotus-iroh on GitHub (Nov 23, 2025). Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/4983 If you type in email with capital letter, you get error "Invalid email or password" and than it redirects and is broken and you must remove and redeploy with docker command
Author
Owner

@YuriySamorodov commented on GitHub (Nov 28, 2025):

Can confirm the same issue.

Workaround:
In my case making both email, user name and nickmame lowercase allowed me to login successfully.
It happily accepted upper case letters, special characters and digits for password though.

Environment:

Linux 1764207385511 6.8.0-88-generic #89-Ubuntu SMP PREEMPT_DYNAMIC
Docker version 29.0.4, build 3247a5a
Nginx Proxy Manager Version 2.13.5 (847c58b) 2025-11-18 11:25:13 UTC, 
OpenResty 1.27.1.2
Certbot certbot 5.1.0
<!-- gh-comment-id:3587706732 --> @YuriySamorodov commented on GitHub (Nov 28, 2025): Can confirm the same issue. **Workaround**: In my case making both email, user name and nickmame lowercase allowed me to login successfully. It happily accepted upper case letters, special characters and digits for password though. **Environment**: ``` Linux 1764207385511 6.8.0-88-generic #89-Ubuntu SMP PREEMPT_DYNAMIC Docker version 29.0.4, build 3247a5a Nginx Proxy Manager Version 2.13.5 (847c58b) 2025-11-18 11:25:13 UTC, OpenResty 1.27.1.2 Certbot certbot 5.1.0 ```
Author
Owner

@Bi11 commented on GitHub (Dec 7, 2025):

I can confirm this behavior.

It appears that PR #4664 only fixed this issue when the admin is created via the INITIAL_ADMIN_EMAIL environment variable.

However, the backend logic for creating a user via the UI (Initial Setup) was not updated. It still saves the email exactly as input (preserving uppercase), while the login validator forces lowercase. This mismatch causes the permanent lockout.

The issue seems to be located in backend/internal/user.js:
github.com/NginxProxyManager/nginx-proxy-manager@847c58b170/backend/internal/user.js (L26-L40)

The email field in the payload needs to be normalized (e.g., .toLowerCase()) before being inserted into the database.

<!-- gh-comment-id:3621598713 --> @Bi11 commented on GitHub (Dec 7, 2025): I can confirm this behavior. It appears that PR #4664 only fixed this issue when the admin is created via the INITIAL_ADMIN_EMAIL environment variable. However, the backend logic for creating a user via the UI (Initial Setup) was not updated. It still saves the email exactly as input (preserving uppercase), while the login validator forces lowercase. This mismatch causes the permanent lockout. The issue seems to be located in backend/internal/user.js: https://github.com/NginxProxyManager/nginx-proxy-manager/blob/847c58b17081f1b6ed1d52e5b81ab0296f9f6c18/backend/internal/user.js#L26-L40 The email field in the payload needs to be normalized (e.g., .toLowerCase()) before being inserted into the database.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/nginx-proxy-manager-NginxProxyManager#3083
No description provided.