# Invalid CSRF token

**URL:** <https://forum.mautic.org/t/invalid-csrf-token/10616>\
**Category:** Product Support\
**Created:** [June 28, 2018, 11:24am UTC](https://forum.mautic.org/t/invalid-csrf-token/10616 "2018-06-28T11:24:25Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![ratma](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/ratma/32/348_2.png) [@ratma](https://forum.mautic.org/u/ratma)\
**Post date:** [June 28, 2018, 11:24am UTC](https://forum.mautic.org/t/invalid-csrf-token/10616/1 "2018-06-28T11:24:25Z")

</div>

Hi, I’ve been using Mautic for months and I’m very happy with your services. But today when trying to access, none of my users worked and I did not have any errors, the login page was simply reloaded.  
Then I deleted the cache from the FTP and now this error appears: “Invalid CSRF token.”, And in the log mautic.WARNING: IP LOOKUP.

Thank you very much for your help.

---

<div class="post-metadata">

**Author:** ![ratma](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/ratma/32/348_2.png) [@ratma](https://forum.mautic.org/u/ratma)\
**Post date:** [June 28, 2018, 2:37pm UTC](https://forum.mautic.org/t/invalid-csrf-token/10616/2 "2018-06-28T14:37:46Z")

</div>

The problem has worsened, now identifies the path with an application / json and shows me the login page in code json.

---

<div class="post-metadata">

**Author:** ![ratma](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/ratma/32/348_2.png) [@ratma](https://forum.mautic.org/u/ratma)\
**Post date:** [June 29, 2018, 4:17am UTC](https://forum.mautic.org/t/invalid-csrf-token/10616/3 "2018-06-29T04:17:31Z")

</div>

After trying a lot of options, update everything, install it again, delete the cache … The problem persisted, I left it impossible. And this morning when I tried again everything worked correctly. I do not know what could have happened, or if it would have been something that was playing on my server. Everything solved itself, after 12 hours invested.

---

<div class="post-metadata">

**Author:** ![mayanktiwaridotcom](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/mayanktiwaridotcom/32/1501_2.png) [@mayanktiwaridotcom](https://forum.mautic.org/u/mayanktiwaridotcom)\
**Post date:** [June 15, 2020, 7:10pm UTC](https://forum.mautic.org/t/invalid-csrf-token/10616/4 "2020-06-15T19:10:54Z")

</div>

Facing the same, did you ever found out what was the issue ?  
I don’t see anything in my logs either logs are clean no errors.

---

<div class="post-metadata">

**Author:** ![fpuser](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mautic.org/fpuser/32/12860_2.png) [@fpuser](https://forum.mautic.org/u/fpuser)\
**Post date:** [February 25, 2025, 12:13pm UTC](https://forum.mautic.org/t/invalid-csrf-token/10616/5 "2025-02-25T12:13:46Z")

</div>

I had this problem with a server I’m moving from a server to another one. Check that you’re using SSL, I had this problem but it disappeared as soon as I was accessing Mautic from https.