# Bitwarden clients keep logging me out **URL:** \ **Category:** Uncategorized\ **Created:** [August 12, 2023, 11:27pm UTC](https://vaultwarden.discourse.group/t/bitwarden-clients-keep-logging-me-out/2852 "2023-08-12T23:27:39Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![johnw](https://avatars.discourse-cdn.com/v4/letter/j/ee59a6/32.png) [@johnw](https://vaultwarden.discourse.group/u/johnw)\ **Post date:** [August 12, 2023, 11:27pm UTC](https://vaultwarden.discourse.group/t/bitwarden-clients-keep-logging-me-out/2852/1 "2023-08-12T23:27:39Z")
Hi I have vaultwarden installed on my unraid server as a docker container along with android and Firefox clients. I’ve noticed that I have to relogin to these clients almost every day or every few days despite clicking ‘remember me’ and never logging out. And when I login in again, it requests my 2fa again as well. Any idea what might be going on here? TIA ---
**Author:** ![BlackDex](https://yyz2.discourse-cdn.com/free1/user_avatar/vaultwarden.discourse.group/blackdex/32/8_2.png) [@BlackDex](https://vaultwarden.discourse.group/u/BlackDex)\ **Post date:** [August 13, 2023, 8:00am UTC](https://vaultwarden.discourse.group/t/bitwarden-clients-keep-logging-me-out/2852/2 "2023-08-13T08:00:45Z")
What is your setup on the server side? Is the date/time correct on all devices and the server? ---
**Author:** ![johnw](https://avatars.discourse-cdn.com/v4/letter/j/ee59a6/32.png) [@johnw](https://vaultwarden.discourse.group/u/johnw)\ **Post date:** [August 14, 2023, 9:10pm UTC](https://vaultwarden.discourse.group/t/bitwarden-clients-keep-logging-me-out/2852/3 "2023-08-14T21:10:21Z")
Sorry for late reply. Vaultwarden runs as a docker container on my unraid server, which is then externally exposed using traefik reverse proxy. I’ve got some some security headers middleware running on the traefik reverse proxy. Could this cause the problem? The date and time should be accurate but I’m not sure how to check this. My phone and laptop definitely have the same date and time ---
**Author:** ![BlackDex](https://yyz2.discourse-cdn.com/free1/user_avatar/vaultwarden.discourse.group/blackdex/32/8_2.png) [@BlackDex](https://vaultwarden.discourse.group/u/BlackDex)\ **Post date:** [August 14, 2023, 10:02pm UTC](https://vaultwarden.discourse.group/t/bitwarden-clients-keep-logging-me-out/2852/4 "2023-08-14T22:02:48Z")
First place to start is `/admin/diagnostics`., that will tell you a bunch of stuff. Some security headers could cause issues, bit also items like ModSecurity or WAF could cause issues for example. Check the logs of both the browser (F12), and of Vaultwarden and see what it reports. ---
**Author:** ![johnw](https://avatars.discourse-cdn.com/v4/letter/j/ee59a6/32.png) [@johnw](https://vaultwarden.discourse.group/u/johnw)\ **Post date:** [August 14, 2023, 10:25pm UTC](https://vaultwarden.discourse.group/t/bitwarden-clients-keep-logging-me-out/2852/5 "2023-08-14T22:25:40Z")
Ok I’ll have a look tonight when I get home. I don’t run modsecurity however I do run crowdsec but I have the vaultwarden collection installed so I assumed this was ok ---
**Author:** ![johnw](https://avatars.discourse-cdn.com/v4/letter/j/ee59a6/32.png) [@johnw](https://vaultwarden.discourse.group/u/johnw)\ **Post date:** [August 15, 2023, 1:37am UTC](https://vaultwarden.discourse.group/t/bitwarden-clients-keep-logging-me-out/2852/6 "2023-08-15T01:37:56Z")
I just checked diagnostics page and the only errors were in the domain section: no match and no https I fixed the https error by correcting the domain url to include https As for the no match error, I was using IP Address rather than domain name to access the container. Should I not do this? I read on the hardening guide something about not allowing IP address access to admin page ---
**Author:** ![BlackDex](https://yyz2.discourse-cdn.com/free1/user_avatar/vaultwarden.discourse.group/blackdex/32/8_2.png) [@BlackDex](https://vaultwarden.discourse.group/u/BlackDex)\ **Post date:** [August 15, 2023, 8:45am UTC](https://vaultwarden.discourse.group/t/bitwarden-clients-keep-logging-me-out/2852/7 "2023-08-15T08:45:10Z")
Check the logs to see what it reports. ---
**Author:** ![johnw](https://avatars.discourse-cdn.com/v4/letter/j/ee59a6/32.png) [@johnw](https://vaultwarden.discourse.group/u/johnw)\ **Post date:** [August 15, 2023, 11:45am UTC](https://vaultwarden.discourse.group/t/bitwarden-clients-keep-logging-me-out/2852/8 "2023-08-15T11:45:01Z")
There are a lot of ‘unable to download icon’ errors but i assume these are unimportant. Besides those, there are two other repeated errors: [rocket::server][WARN] Received SIGTERM. Requesting shutdown. and [error][ERROR] 2FA token not provided Could either of these point to the problem? Thanks again for your help ---
**Author:** ![johnw](https://avatars.discourse-cdn.com/v4/letter/j/ee59a6/32.png) [@johnw](https://vaultwarden.discourse.group/u/johnw)\ **Post date:** [November 7, 2023, 8:15pm UTC](https://vaultwarden.discourse.group/t/bitwarden-clients-keep-logging-me-out/2852/9 "2023-11-07T20:15:52Z")
I’m still having this problem with bitwarden constantly logging out. My Android app logs out almost everyday and the only error in the log seems to be the 2FA token not provided. When I looked this error up, it’s apparently related to the reverse proxy changing the headers. I run Traefik with security headers middleware so turned this off but I still have the problem. I’m also running crowdsec and geoblock middleware but these don’t change headers as far as I know. Anything else I can try? ---
**Author:** ![Furkan](https://avatars.discourse-cdn.com/v4/letter/f/278dde/32.png) [@Furkan](https://vaultwarden.discourse.group/u/Furkan)\ **Post date:** [January 12, 2024, 12:20pm UTC](https://vaultwarden.discourse.group/t/bitwarden-clients-keep-logging-me-out/2852/10 "2024-01-12T12:20:23Z")
Same issue. Everytime when i reopen the webinterface of my GUI Vaultwarden, it asked me to relogin. I dont need to enter my 2FA everytime, just logging in. Any updates here?!