mirror of
https://github.com/dani-garcia/vaultwarden.git
synced 2026-07-17 17:32:27 -05:00
[GH-ISSUE #6225] Angular Error : Invalid Encryption type #39619
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @Deytron on GitHub (Aug 25, 2025).
Original GitHub issue: https://github.com/dani-garcia/vaultwarden/issues/6225
Prerequisites
Vaultwarden Support String
Your environment (Generated via diagnostics page)
Config & Details (Generated via diagnostics page)
Show Config & Details
Environment settings which are overridden: DOMAIN, SENDS_ALLOWED, SIGNUPS_ALLOWED, SIGNUPS_VERIFY, ORG_CREATION_USERS, INVITATIONS_ALLOWED, EMERGENCY_ACCESS_ALLOWED, SHOW_PASSWORD_HINT, ORGANIZATION_INVITE_AUTO_ACCEPT, ADMIN_TOKEN, REQUIRE_DEVICE_EMAIL, SSO_ONLY, SSO_SIGNUPS_MATCH_EMAIL, SSO_AUTH_ONLY_NOT_SESSION, SMTP_HOST, SMTP_SECURITY, SMTP_FROM
Config:
Vaultwarden Build Version
v1.34.1-6
Deployment method
Other method
Custom deployment method
Kubernetes, using timshel\OIDCWarden
Reverse Proxy
traefik 3.4.4
Host/Server Operating System
Linux
Operating System Version
Kubernetes 1.33.3
Clients
Web Vault
Client Version
Firefox 142 - Vaultwarden Web 2025.5.1
Steps To Reproduce
Expected Result
Items in orgs are displayed on the page
Actual Result
Items load indefinitely
Logs
Screenshots or Videos
Additional Context
This happened after restoring a PostgreSQL backup. I tried creating new users, inviting them to the org etc... But it didn't seem to work. At this point I don't know if there's something wrong on the server side of things and the ciphers, or the users
If I had a way to simply export the org vault from somewhere, I would gladly do it
All 5000 entries are still present in the database
@dani-garcia commented on GitHub (Aug 25, 2025):
That's very strange, it looks like the user's copy of the organization key is invalid.
Can you check the entry in the
users_organizationstable? There should be a column calledakeywhich should contain a string of the formatNUMBER.BASE64, something like4.a8b9h....., can you tell us what number you see before the period?@Deytron commented on GitHub (Aug 26, 2025):
Hello, thanks for the quick answer!
There's a
2.Brn+...in theakeycolumn. The exact same value is present in theuserstable.Ciphers also start with a 2.
I tried changed the value to
4.Brn+y..., and I get a different error:I believe there was another issue that mentioned this exact error, maybe https://github.com/dani-garcia/vaultwarden/discussions/5060 ?
Either way, I don't think changing the key like this is a good idea, but at least this gives some insight. One thing I did not try is downgrading the Vaultwarden instance to 1.32.0. I can do it if you believe this can help
@dani-garcia commented on GitHub (Aug 26, 2025):
Yeah just changing the number is not going to work, because the keys are different formats.
The
usertable'sakeyandprivate_keyare simmetrically encrypted keys, and so should start with2., but theusers_organizationsakeyshould start with4., as it's using asymmetric encryption. Having a key starting with2.onusers_organizationsmeans that something has gone wrong, I'm just not sure what.Is the backup you restored particularly old? Maybe there is some data migration that is just not being applied correctly. If so, I'd try to restore it into an older Vaultwarden release, and seeing if that works.
@Deytron commented on GitHub (Sep 16, 2025):
Hello, sorry for taking so long to answer.
So some updates, after fiddling in the database by creating a new org and trying to copy an akey to the old org, I get the following result :
My guess is that something must have gone severely wrong, and it would be better now to start from scratch with an old backup. You can close the issue if you want :)