# "Credentials not accepted": the key or secret was refused

Your provider refused the keys. Usually the secret was pasted incorrectly, or the key doesn't exist in this account. Offloft shows "The Access Key ID wasn't recognized." or "The Secret Access Key doesn't match the Access Key ID." Paste both again, or create a new key.

## "The Access Key ID wasn't recognized."

Your provider returned `InvalidAccessKeyId`. Check for these:

- A space or a line break was copied with the key.
- The key belongs to a different account or provider.
- The key was deleted.

## "The Secret Access Key doesn't match the Access Key ID."

Your provider returned `SignatureDoesNotMatch`. Paste the secret again. Most providers show it only once, so if you no longer have it, create a new key.

## Still refused?

Create a new key with your provider's [setup guide](/docs/connect-a-provider), paste it in **Settings → Connection**, and run the [connection test](/docs/connection-test).

## If a saved key stopped working

A key that worked before may have been deleted at the provider. If your WordPress security keys in `wp-config.php` changed, Offloft can no longer read the saved keys, and says so: enter them again. To keep saved keys readable when those change, define `OFFLOFT_ENCRYPTION_KEY` in `wp-config.php`.

Updated 2026-11-06.

Source: https://www.offloft.com/docs/troubleshooting/credentials-not-accepted