starred/vaultwarden

Fork 0

mirror of https://github.com/dani-garcia/vaultwarden.git synced 2026-04-26 01:35:54 +03:00

[GH-ISSUE #6434] Error deleting twofactors #2434

New issue

Closed

opened 2026-03-03 02:18:19 +03:00 by kerem · 1 comment

kerem commented

2026-03-03 02:18:19 +03:00

Owner

Originally created by @zendiik on GitHub (Nov 3, 2025).
Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/6434

Prerequisites

I have searched the existing Closed AND Open Issues AND Discussions
I have searched and read the documentation

Vaultwarden Support String

Your environment (Generated via diagnostics page)

Vaultwarden version: v1.34.3
Web-vault version: v2025.7.0
OS/Arch: linux/x86_64
Running within a container: true (Base: Debian)
Database type: SQLite
Database version: 3.50.2
Uses config.json: false
Uses a reverse proxy: true
IP Header check: true (X-Real-IP)
Internet access: true
Internet access via a proxy: false
DNS Check: true
Browser/Server Time Check: true
Server/NTP Time Check: true
Domain Configuration Check: true
HTTPS Check: true
Websocket Check: true
HTTP Response Checks: true

Config & Details (Generated via diagnostics page)

Show Config & Details

Config:

{
  "_duo_akey": null,
  "_enable_duo": true,
  "_enable_email_2fa": true,
  "_enable_smtp": true,
  "_enable_yubico": true,
  "_icon_service_csp": "",
  "_icon_service_url": "",
  "_ip_header_enabled": true,
  "_max_note_size": 10000,
  "_smtp_img_src": "***:",
  "admin_ratelimit_max_burst": 3,
  "admin_ratelimit_seconds": 300,
  "admin_session_lifetime": 20,
  "admin_token": "***",
  "allowed_connect_src": "",
  "allowed_iframe_ancestors": "",
  "attachments_folder": "data/attachments",
  "auth_request_purge_schedule": "30 * * * * *",
  "authenticator_disable_time_drift": false,
  "data_folder": "data",
  "database_conn_init": "",
  "database_max_conns": 10,
  "database_timeout": 30,
  "database_url": "***************",
  "db_connection_retries": 15,
  "disable_2fa_remember": false,
  "disable_admin_token": false,
  "disable_icon_download": false,
  "domain": "*****://********************",
  "domain_origin": "*****://********************",
  "domain_path": "",
  "domain_set": true,
  "duo_context_purge_schedule": "30 * * * * *",
  "duo_host": null,
  "duo_ikey": null,
  "duo_skey": null,
  "duo_use_iframe": false,
  "email_2fa_auto_fallback": false,
  "email_2fa_enforce_on_verified_invite": false,
  "email_attempts_limit": 3,
  "email_change_allowed": true,
  "email_expiration_time": 600,
  "email_token_size": 6,
  "emergency_access_allowed": true,
  "emergency_notification_reminder_schedule": "0 3 * * * *",
  "emergency_request_timeout_schedule": "0 7 * * * *",
  "enable_db_wal": true,
  "enable_websocket": true,
  "enforce_single_org_with_reset_pw_policy": false,
  "event_cleanup_schedule": "0 10 0 * * *",
  "events_days_retain": null,
  "experimental_client_feature_flags": "",
  "extended_logging": true,
  "helo_name": null,
  "hibp_api_key": null,
  "http_request_block_non_global_ips": true,
  "http_request_block_regex": null,
  "icon_blacklist_non_global_ips": true,
  "icon_blacklist_regex": null,
  "icon_cache_folder": "data/icon_cache",
  "icon_cache_negttl": 259200,
  "icon_cache_ttl": 2592000,
  "icon_download_timeout": 10,
  "icon_redirect_code": 302,
  "icon_service": "internal",
  "incomplete_2fa_schedule": "30 * * * * *",
  "incomplete_2fa_time_limit": 3,
  "increase_note_size_limit": false,
  "invitation_expiration_hours": 120,
  "invitation_org_name": "Vaultwarden",
  "invitations_allowed": true,
  "ip_header": "X-Real-IP",
  "job_poll_interval_ms": 30000,
  "log_file": null,
  "log_level": "info",
  "log_timestamp_format": "%Y-%m-%d %H:%M:%S.%3f",
  "login_ratelimit_max_burst": 10,
  "login_ratelimit_seconds": 60,
  "org_attachment_limit": null,
  "org_creation_users": "",
  "org_events_enabled": false,
  "org_groups_enabled": false,
  "password_hints_allowed": true,
  "password_iterations": 600000,
  "push_enabled": true,
  "push_identity_uri": "https://identity.bitwarden.eu",
  "push_installation_id": "***",
  "push_installation_key": "***",
  "push_relay_uri": "https://api.bitwarden.eu",
  "reload_templates": false,
  "require_device_email": false,
  "rsa_key_filename": "data/rsa_key",
  "send_purge_schedule": "0 5 * * * *",
  "sendmail_command": null,
  "sends_allowed": true,
  "sends_folder": "data/sends",
  "show_password_hint": false,
  "signups_allowed": true,
  "signups_domains_whitelist": "",
  "signups_verify": false,
  "signups_verify_resend_limit": 6,
  "signups_verify_resend_time": 3600,
  "smtp_accept_invalid_certs": false,
  "smtp_accept_invalid_hostnames": false,
  "smtp_auth_mechanism": null,
  "smtp_debug": false,
  "smtp_embed_images": true,
  "smtp_explicit_tls": null,
  "smtp_from": "********************",
  "smtp_from_name": "Vaultwarden",
  "smtp_host": "*****************",
  "smtp_password": "***",
  "smtp_port": 587,
  "smtp_security": "starttls",
  "smtp_ssl": null,
  "smtp_timeout": 15,
  "smtp_username": "******",
  "templates_folder": "data/templates",
  "tmp_folder": "data/tmp",
  "trash_auto_delete_days": null,
  "trash_purge_schedule": "0 5 0 * * *",
  "use_sendmail": false,
  "use_syslog": false,
  "user_attachment_limit": null,
  "user_send_limit": null,
  "web_vault_enabled": true,
  "web_vault_folder": "web-vault/",
  "yubico_client_id": null,
  "yubico_secret_key": null,
  "yubico_server": null
}

Vaultwarden Build Version

v1.34.3

Deployment method

Official Container Image

Custom deployment method

No response

Reverse Proxy

nginx 1.25.5

Host/Server Operating System

Linux

Operating System Version

Kubernetes

Clients

Web Vault

Client Version

No response

Steps To Reproduce

Login to admin
Go to Users
Click on 'Remove all 2FA'
Confirm

Expected Result

Removed 2FAs for user

Actual Result

Error

Logs

[2025-11-03 18:29:10.481][response][INFO] (users_overview) GET /admin/users/overview => 200 OK
[2025-11-03 18:29:18.783][request][INFO] POST /admin/users/d4375c01-a88b-4911-9171-67267cf71c7e/remove-2fa
[2025-11-03 18:29:18.786][error][ERROR] Error deleting twofactors.
[CAUSE] DatabaseError(
    Unknown,
    "attempt to write a readonly database",
)
[2025-11-03 18:29:18.786][response][INFO] (remove_2fa) POST /admin/users/<user_id>/remove-2fa application/json => 400 Bad Request
[2025-11-03 18:29:20.131][request][INFO] GET /admin/users/overview
[2025-11-03 18:29:20.169][response][INFO] (users_overview) GET /admin/users/overview => 200 OK

Screenshots or Videos

No response

Additional Context

No response

Originally created by @zendiik on GitHub (Nov 3, 2025). Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/6434 ### Prerequisites - [x] I have searched the existing **Closed _AND_ Open** [Issues](https://github.com/dani-garcia/vaultwarden/issues?q=is%3Aissue%20) **_AND_** [Discussions](https://github.com/dani-garcia/vaultwarden/discussions?discussions_q=) - [x] I have searched and read the [documentation](https://github.com/dani-garcia/vaultwarden/wiki/) ### Vaultwarden Support String ### Your environment (Generated via diagnostics page) * Vaultwarden version: v1.34.3 * Web-vault version: v2025.7.0 * OS/Arch: linux/x86_64 * Running within a container: true (Base: Debian) * Database type: SQLite * Database version: 3.50.2 * Uses config.json: false * Uses a reverse proxy: true * IP Header check: true (X-Real-IP) * Internet access: true * Internet access via a proxy: false * DNS Check: true * Browser/Server Time Check: true * Server/NTP Time Check: true * Domain Configuration Check: true * HTTPS Check: true * Websocket Check: true * HTTP Response Checks: true ### Config & Details (Generated via diagnostics page) <details><summary>Show Config & Details</summary> **Config:** ```json { "_duo_akey": null, "_enable_duo": true, "_enable_email_2fa": true, "_enable_smtp": true, "_enable_yubico": true, "_icon_service_csp": "", "_icon_service_url": "", "_ip_header_enabled": true, "_max_note_size": 10000, "_smtp_img_src": "***:", "admin_ratelimit_max_burst": 3, "admin_ratelimit_seconds": 300, "admin_session_lifetime": 20, "admin_token": "***", "allowed_connect_src": "", "allowed_iframe_ancestors": "", "attachments_folder": "data/attachments", "auth_request_purge_schedule": "30 * * * * *", "authenticator_disable_time_drift": false, "data_folder": "data", "database_conn_init": "", "database_max_conns": 10, "database_timeout": 30, "database_url": "***************", "db_connection_retries": 15, "disable_2fa_remember": false, "disable_admin_token": false, "disable_icon_download": false, "domain": "*****://********************", "domain_origin": "*****://********************", "domain_path": "", "domain_set": true, "duo_context_purge_schedule": "30 * * * * *", "duo_host": null, "duo_ikey": null, "duo_skey": null, "duo_use_iframe": false, "email_2fa_auto_fallback": false, "email_2fa_enforce_on_verified_invite": false, "email_attempts_limit": 3, "email_change_allowed": true, "email_expiration_time": 600, "email_token_size": 6, "emergency_access_allowed": true, "emergency_notification_reminder_schedule": "0 3 * * * *", "emergency_request_timeout_schedule": "0 7 * * * *", "enable_db_wal": true, "enable_websocket": true, "enforce_single_org_with_reset_pw_policy": false, "event_cleanup_schedule": "0 10 0 * * *", "events_days_retain": null, "experimental_client_feature_flags": "", "extended_logging": true, "helo_name": null, "hibp_api_key": null, "http_request_block_non_global_ips": true, "http_request_block_regex": null, "icon_blacklist_non_global_ips": true, "icon_blacklist_regex": null, "icon_cache_folder": "data/icon_cache", "icon_cache_negttl": 259200, "icon_cache_ttl": 2592000, "icon_download_timeout": 10, "icon_redirect_code": 302, "icon_service": "internal", "incomplete_2fa_schedule": "30 * * * * *", "incomplete_2fa_time_limit": 3, "increase_note_size_limit": false, "invitation_expiration_hours": 120, "invitation_org_name": "Vaultwarden", "invitations_allowed": true, "ip_header": "X-Real-IP", "job_poll_interval_ms": 30000, "log_file": null, "log_level": "info", "log_timestamp_format": "%Y-%m-%d %H:%M:%S.%3f", "login_ratelimit_max_burst": 10, "login_ratelimit_seconds": 60, "org_attachment_limit": null, "org_creation_users": "", "org_events_enabled": false, "org_groups_enabled": false, "password_hints_allowed": true, "password_iterations": 600000, "push_enabled": true, "push_identity_uri": "https://identity.bitwarden.eu", "push_installation_id": "***", "push_installation_key": "***", "push_relay_uri": "https://api.bitwarden.eu", "reload_templates": false, "require_device_email": false, "rsa_key_filename": "data/rsa_key", "send_purge_schedule": "0 5 * * * *", "sendmail_command": null, "sends_allowed": true, "sends_folder": "data/sends", "show_password_hint": false, "signups_allowed": true, "signups_domains_whitelist": "", "signups_verify": false, "signups_verify_resend_limit": 6, "signups_verify_resend_time": 3600, "smtp_accept_invalid_certs": false, "smtp_accept_invalid_hostnames": false, "smtp_auth_mechanism": null, "smtp_debug": false, "smtp_embed_images": true, "smtp_explicit_tls": null, "smtp_from": "********************", "smtp_from_name": "Vaultwarden", "smtp_host": "*****************", "smtp_password": "***", "smtp_port": 587, "smtp_security": "starttls", "smtp_ssl": null, "smtp_timeout": 15, "smtp_username": "******", "templates_folder": "data/templates", "tmp_folder": "data/tmp", "trash_auto_delete_days": null, "trash_purge_schedule": "0 5 0 * * *", "use_sendmail": false, "use_syslog": false, "user_attachment_limit": null, "user_send_limit": null, "web_vault_enabled": true, "web_vault_folder": "web-vault/", "yubico_client_id": null, "yubico_secret_key": null, "yubico_server": null } ``` </details> ### Vaultwarden Build Version v1.34.3 ### Deployment method Official Container Image ### Custom deployment method _No response_ ### Reverse Proxy nginx 1.25.5 ### Host/Server Operating System Linux ### Operating System Version Kubernetes ### Clients Web Vault ### Client Version _No response_ ### Steps To Reproduce 1. Login to admin 2. Go to Users 3. Click on 'Remove all 2FA' 4. Confirm ### Expected Result Removed 2FAs for user ### Actual Result Error ### Logs ```text [2025-11-03 18:29:10.481][response][INFO] (users_overview) GET /admin/users/overview => 200 OK [2025-11-03 18:29:18.783][request][INFO] POST /admin/users/d4375c01-a88b-4911-9171-67267cf71c7e/remove-2fa [2025-11-03 18:29:18.786][error][ERROR] Error deleting twofactors. [CAUSE] DatabaseError( Unknown, "attempt to write a readonly database", ) [2025-11-03 18:29:18.786][response][INFO] (remove_2fa) POST /admin/users/<user_id>/remove-2fa application/json => 400 Bad Request [2025-11-03 18:29:20.131][request][INFO] GET /admin/users/overview [2025-11-03 18:29:20.169][response][INFO] (users_overview) GET /admin/users/overview => 200 OK ``` ### Screenshots or Videos _No response_ ### Additional Context _No response_

kerem

2026-03-03 02:18:19 +03:00

closed this issue
added the
bug
label

kerem commented

2026-03-03 02:18:20 +03:00

Author

Owner

@zendiik commented on GitHub (Nov 3, 2025):

I even getting this, but I don't know if it's related.

[2025-11-03 18:40:38.460][response][INFO] (login) POST /identity/connect/token => 400 Bad Request
[2025-11-03 18:40:42.750][error][ERROR] Error saving device.
[CAUSE] DatabaseError(
    Unknown,
    "attempt to write a readonly database",
)
[2025-11-03 18:40:42.750][response][INFO] (login) POST /identity/connect/token => 400 Bad Request
[2025-11-03 18:40:58.930][request][INFO] POST /identity/accounts/prelogin
[2025-11-03 18:40:58.932][response][INFO] (prelogin) POST /identity/accounts/prelogin => 200 OK
[2025-11-03 18:40:59.023][request][INFO] POST /identity/connect/token
[2025-11-03 18:40:59.395][error][ERROR] Error adding twofactor_incomplete record.
[CAUSE] DatabaseError(
    Unknown,
    "attempt to write a readonly database",
)
[2025-11-03 18:40:59.395][response][INFO] (login) POST /identity/connect/token => 400 Bad Request

@zendiik commented on GitHub (Nov 3, 2025): I even getting this, but I don't know if it's related. ``` [2025-11-03 18:40:38.460][response][INFO] (login) POST /identity/connect/token => 400 Bad Request [2025-11-03 18:40:42.750][error][ERROR] Error saving device. [CAUSE] DatabaseError( Unknown, "attempt to write a readonly database", ) [2025-11-03 18:40:42.750][response][INFO] (login) POST /identity/connect/token => 400 Bad Request [2025-11-03 18:40:58.930][request][INFO] POST /identity/accounts/prelogin [2025-11-03 18:40:58.932][response][INFO] (prelogin) POST /identity/accounts/prelogin => 200 OK [2025-11-03 18:40:59.023][request][INFO] POST /identity/connect/token [2025-11-03 18:40:59.395][error][ERROR] Error adding twofactor_incomplete record. [CAUSE] DatabaseError( Unknown, "attempt to write a readonly database", ) [2025-11-03 18:40:59.395][response][INFO] (login) POST /identity/connect/token => 400 Bad Request ```