Vaultwarden continues logging of an error infinitely

[juergenRe]

Just to ask if this behavior is correct/known:

1. Initially I had a problem with 2FA and aborted the login. This initiated the log entry
   User [email protected] did not complete a 2FA login within the configured time limit. IP: yyy.yyy.y.y.
   So far correct.

2. The system then tries to send an email about this to the configured SMTP server. Again this fails, because the trial period to sendgrid timed out (I was not aware of this anymore). Again there are some log entries about the connection and its failure. Again correct.
   [2025-08-29 14:55:50.522][lettre::transport::smtp::client::async_connection][DEBUG] Wrote: EHLO bitwarden<CRLF> [2025-08-29 14:55:50.559][lettre::transport::smtp::client::async_connection][DEBUG] << 250-smtp.sendgrid.net<CRLF> [2025-08-29 14:55:50.560][lettre::transport::smtp::client::async_connection][DEBUG] << 250-smtp.sendgrid.net<CRLF>250-8BITMIME<CRLF> [2025-08-29 14:55:50.560][lettre::transport::smtp::client::async_connection][DEBUG] << 250-smtp.sendgrid.net<CRLF>250-8BITMIME<CRLF>250-PIPELINING<CRLF> [2025-08-29 14:55:50.560][lettre::transport::smtp::client::async_connection][DEBUG] << 250-smtp.sendgrid.net<CRLF>250-8BITMIME<CRLF>250-PIPELINING<CRLF>250-SIZE 31457280<CRLF> [2025-08-29 14:55:50.560][lettre::transport::smtp::client::async_connection][DEBUG] << 250-smtp.sendgrid.net<CRLF>250-8BITMIME<CRLF>250-PIPELINING<CRLF>250-SIZE 31457280<CRLF>250-SMTPUTF8<CRLF> [2025-08-29 14:55:50.560][lettre::transport::smtp::client::async_connection][DEBUG] << 250-smtp.sendgrid.net<CRLF>250-8BITMIME<CRLF>250-PIPELINING<CRLF>250-SIZE 31457280<CRLF>250-SMTPUTF8<CRLF>250-STARTTLS<CRLF> [2025-08-29 14:55:50.560][lettre::transport::smtp::client::async_connection][DEBUG] << 250-smtp.sendgrid.net<CRLF>250-8BITMIME<CRLF>250-PIPELINING<CRLF>250-SIZE 31457280<CRLF>250-SMTPUTF8<CRLF>250-STARTTLS<CRLF>250-AUTH PLAIN LOGIN<CRLF> [2025-08-29 14:55:50.560][lettre::transport::smtp::client::async_connection][DEBUG] << 250-smtp.sendgrid.net<CRLF>250-8BITMIME<CRLF>250-PIPELINING<CRLF>250-SIZE 31457280<CRLF>250-SMTPUTF8<CRLF>250-STARTTLS<CRLF>250-AUTH PLAIN LOGIN<CRLF>250 AUTH=PLAIN LOGIN<CRLF> [2025-08-29 14:55:50.560][lettre::transport::smtp::client::async_connection][DEBUG] server smtp.sendgrid.net with {SmtpUtfEight, StartTls, EightBitMime, Authentication(Login), Authentication(Plain)} [2025-08-29 14:55:50.560][lettre::transport::smtp::client::async_connection][DEBUG] Wrote: STARTTLS<CRLF> [2025-08-29 14:55:50.598][lettre::transport::smtp::client::async_connection][DEBUG] << 220 Begin TLS negotiation now<CRLF> [2025-08-29 14:55:50.678][lettre::transport::smtp::client::async_connection][DEBUG] connection encrypted [2025-08-29 14:55:50.679][lettre::transport::smtp::client::async_connection][DEBUG] Wrote: EHLO bitwarden<CRLF> [2025-08-29 14:55:50.754][lettre::transport::smtp::client::async_connection][DEBUG] << 250-smtp.sendgrid.net<CRLF> [2025-08-29 14:55:50.754][lettre::transport::smtp::client::async_connection][DEBUG] << 250-smtp.sendgrid.net<CRLF>250-8BITMIME<CRLF> [2025-08-29 14:55:50.754][lettre::transport::smtp::client::async_connection][DEBUG] << 250-smtp.sendgrid.net<CRLF>250-8BITMIME<CRLF>250-PIPELINING<CRLF> [2025-08-29 14:55:50.754][lettre::transport::smtp::client::async_connection][DEBUG] << 250-smtp.sendgrid.net<CRLF>250-8BITMIME<CRLF>250-PIPELINING<CRLF>250-SIZE 31457280<CRLF> [2025-08-29 14:55:50.754][lettre::transport::smtp::client::async_connection][DEBUG] << 250-smtp.sendgrid.net<CRLF>250-8BITMIME<CRLF>250-PIPELINING<CRLF>250-SIZE 31457280<CRLF>250-SMTPUTF8<CRLF> [2025-08-29 14:55:50.755][lettre::transport::smtp::client::async_connection][DEBUG] << 250-smtp.sendgrid.net<CRLF>250-8BITMIME<CRLF>250-PIPELINING<CRLF>250-SIZE 31457280<CRLF>250-SMTPUTF8<CRLF>250-STARTTLS<CRLF> [2025-08-29 14:55:50.755][lettre::transport::smtp::client::async_connection][DEBUG] << 250-smtp.sendgrid.net<CRLF>250-8BITMIME<CRLF>250-PIPELINING<CRLF>250-SIZE 31457280<CRLF>250-SMTPUTF8<CRLF>250-STARTTLS<CRLF>250-AUTH PLAIN LOGIN<CRLF> [2025-08-29 14:55:50.755][lettre::transport::smtp::client::async_connection][DEBUG] << 250-smtp.sendgrid.net<CRLF>250-8BITMIME<CRLF>250-PIPELINING<CRLF>250-SIZE 31457280<CRLF>250-SMTPUTF8<CRLF>250-STARTTLS<CRLF>250-AUTH PLAIN LOGIN<CRLF>250 AUTH=PLAIN LOGIN<CRLF> [2025-08-29 14:55:50.755][lettre::transport::smtp::client::async_connection][DEBUG] Wrote: AUTH PLAIN xxxxxxxxx=<CRLF> [2025-08-29 14:55:51.015][lettre::transport::smtp::client::async_connection][DEBUG] << 451 Authentication failed: Maximum credits exceeded<CRLF> [2025-08-29 14:55:51.016][vaultwarden::mail][ERROR] SMTP 4xx error: transient error (451): Authentication failed: Maximum credits exceeded

3. However, Vaultwarden now tries every minute to resend the message. It does not stop doing this since several days. The behavior did survive a reboot and update to a new version.

Question: How to stop it?
Thanks for any hints.

[stefan0xC]

If you fix your email setup so that the mail can be send successfully the responsible entry in twofactor_incomplete would be deleted. Alternatively you could also disable mail or turn off the INCOMPLETE_2FA_SCHEDULE to stop trying to send this mail (but I would not really recommend it).

[juergenRe]

Thanks Stefan, I'll try the latter temporarly till the SMTP access is fixed.