{"record":{"id":"0baafaf5ac031bb3","repo":"bitwarden/server","slug":"incorrect-password","errorCode":null,"errorMessage":"Incorrect password","messagePattern":"Incorrect password","errorType":"exception","errorClass":"BadRequestException","httpStatus":400,"severity":"error","filePath":"src/Api/AdminConsole/Controllers/OrganizationUsersController.cs","lineNumber":538,"sourceCode":"            .ToList();\n\n        return collectionAccessToSave;\n    }\n\n    [HttpPut(\"{userId}/reset-password-enrollment\")]\n    public async Task PutResetPasswordEnrollment(Guid orgId, Guid userId, [FromBody] OrganizationUserResetPasswordEnrollmentRequestModel model)\n    {\n        var user = await _userService.GetUserByPrincipalAsync(User);\n        if (user == null)\n        {\n            throw new UnauthorizedAccessException();\n        }\n\n        var ssoConfig = await _ssoConfigRepository.GetByOrganizationIdAsync(orgId);\n        var isTdeEnrollment = ssoConfig != null && ssoConfig.Enabled && ssoConfig.GetData().MemberDecryptionType == MemberDecryptionType.TrustedDeviceEncryption;\n        if (!isTdeEnrollment && OrganizationUser.IsValidResetPasswordKey(model.ResetPasswordKey) && !await _userService.VerifySecretAsync(user, model.MasterPasswordHash))\n        {\n            throw new BadRequestException(\"Incorrect password\");\n        }\n\n        var callingUserId = user.Id;\n        await _updateUserResetPasswordEnrollmentCommand.UpdateUserResetPasswordEnrollmentAsync(\n            orgId, userId, model.ResetPasswordKey, callingUserId);\n\n        var orgUser = await _organizationUserRepository.GetByOrganizationAsync(orgId, user.Id);\n        if (orgUser.Status == OrganizationUserStatusType.Invited)\n        {\n            await _acceptOrgUserCommand.AcceptOrgUserByOrgIdAsync(orgId, user, _userService);\n        }\n    }\n\n#nullable enable\n    [HttpPut(\"{id}/recover-account\")]\n    [Authorize<ManageAccountRecoveryRequirement>]\n    public async Task<IResult> RecoverAccount(Guid orgId, Guid id, [FromBody] OrganizationUserResetPasswordRequestModel model,\n        [InjectOrganizationUser] OrganizationUser targetOrganizationUser)","sourceCodeStart":520,"sourceCodeEnd":556,"githubUrl":"https://github.com/bitwarden/server/blob/e93b962371d80964556f5590c6615f5160a437a1/src/Api/AdminConsole/Controllers/OrganizationUsersController.cs#L520-L556","documentation":"Error \"Incorrect password\" thrown in bitwarden/server.","triggerScenarios":"Thrown when the supplied master password fails verification during an operation that requires password confirmation, such as an admin reset or sensitive account action.","commonSituations":"See trigger scenarios.","solutions":["Re-enter your master password; this prompt requires your own current password for verification.","If you log in with SSO, use the master password you set, or complete the flow from a client that supports your login type.","Reset your master password if you have forgotten it, then retry the operation."],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"e93b962371d80964556f5590c6615f5160a437a1","analyzedAt":"2026-08-13T14:22:19.382Z","schemaVersion":2},"datasetVersion":"2026-08-13T19:17:28.613Z"}