Offloft 0.1.0 is here: offload your WordPress media and know it arrived.Read what's new
Browse the docs

"Credentials not accepted": the key or secret was refused

Updated November 6, 2026Suggest an editView as Markdown

Your provider refused the keys. Usually the secret was pasted incorrectly, or the key doesn't exist in this account. Offloft shows "The Access Key ID wasn't recognized." or "The Secret Access Key doesn't match the Access Key ID." Paste both again, or create a new key.

"The Access Key ID wasn't recognized."

Your provider returned InvalidAccessKeyId. Check for these:

  • A space or a line break was copied with the key.
  • The key belongs to a different account or provider.
  • The key was deleted.

"The Secret Access Key doesn't match the Access Key ID."

Your provider returned SignatureDoesNotMatch. Paste the secret again. Most providers show it only once, so if you no longer have it, create a new key.

Still refused?

Create a new key with your provider's setup guide, paste it in Settings → Connection, and run the connection test.

If a saved key stopped working

A key that worked before may have been deleted at the provider. If your WordPress security keys in wp-config.php changed, Offloft can no longer read the saved keys, and says so: enter them again. To keep saved keys readable when those change, define OFFLOFT_ENCRYPTION_KEY in wp-config.php.

Type to search.