Unable to connect to home assistant authorization was revoked

[ehinkle27]

I have been using HA app on my android for a while and recently I have not been able to load HA on the app. I keep getting “It Appears your authorization was revoked, please reconnect to home assistant”. I am not sure if that is due to an upgrade as I did just upgrade to the latest version of HA.

I have tried uninstalling the the app, clearing the storage and still have the same issue. I tried deleting the devices under my account in HA, and reinstalling and connecting and still nothing happens. I have two different android devices I have tried this on and both have the same problem. I can login on the device to set it up, I am connecting locally to HA using http://10.x.x.x:8123, I get the username and password field, login and get that error. If I then look in HA under mobile app i do see my device along with the information showing up for last connect and the different sensors if I go to this url http://10.x.x.x:8123/config/integrations/integration/mobile_app#config_entry=01jzdqj…
but I can’t load it via the app. I have also tried disabling the webhook for the devices but not sure if that worked as they did not disappear.

Below is the information about my install and an error that shows in the logs. anyone have any other ideas for what i can try?

• Installation methodHome Assistant OS
• Core2025.6.3
• Supervisor2025.06.2
• Operating System15.2
• Frontend20250531.4

Login attempt or request with invalid authentication from 10.35.x.x (10.35.x.x). Requested URL: ‘/auth/login_flow/d0488b479a2e10b846586ceb0’. (Mozilla/5.0 (Linux; Android 15; SM-S938U1 Build/AP3A.240905.015.A2; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/137.0.7151.115 Mobile Safari/537.36 Home Assistant/2025.6.6-16662 (Android 15; SM-S938U1))
Login attempt or request with invalid authentication from 10.35.x.x (10.35.x.x). Requested URL: ‘/auth/token’. (Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36)
Login attempt or request with invalid authentication from 10.35.x.x (10.35.x.x). Requested URL: ‘/api/websocket’. (Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36)

[WarLion]

You’re seeing those errors because the Home Assistant Companion app isn’t being able to authenticate properly with your local server

Delete every instance associated with those devices

Clear Data & Clear Cache in your app uninstall - reboot phone and reinstall

Resetting the Android-app

I need te reset or re-install the Companion app for Android. Following the steps like described at the website does not seems to work at all. This are the steps: "At times you may need to start fresh with the Android app as a new feature may not be working properly or something odd happens. Check that Home Assistant Core and the Android app are up to date. Clear Storage or App data in Android app. In Home Assistant navigate to Configuration > Integration. Remove the mobile app entry for the d…

[ehinkle27]

have done that and still have this, unless I am missing deleting the device. I did it under the mobile app link

[ehinkle27]

This is what it shows for mobile App, will try once again, but has failed earlier.

[WarLion]

@ehinkle27

have done that and still have this, unless I am missing deleting the device. I did it under the mobile app link

try also
settings-> people-> your user profile
check if you have more that 1 instance

on your Android Settings → Storage → Home Assistan` and manually delete app storage if available

editt try creating a new user and log in using that

alsop share your config homeassistant (configuration.yaml)

homeassistant:
  auth_providers:
    - type: homeassistant
    - type: trusted_networks
      trusted_networks:
        - 192.168.68.0/24
        - fd00::/8
      trusted_users:
        192.168.1.0/24: 
          - 2cf8fd18b5494e38a8b0b30b8b0a6bfc
        "fd00::/8":
          - 2cf8fd18b5494e38a8b0b30b8b0a6bfc
  packages: !include_dir_named packages

maybe ou are blocking a ip

Authentication providers

[ehinkle27]

This is the config

[WarLion]

try adding a trusted network and user

check the authentification provider to test

Authentication providers

homeassistant:
  auth_providers:
    - type: trusted_networks
      trusted_networks:
        - 192.168.0.0/24
        - 192.168.10.0/24
        - fd00::/8
      trusted_users:
        192.168.0.1: user1_id
        192.168.0.0/24:
          - user1_id
          - user2_id
        "fd00::/8":
          - user1_id
          - group: system-users

[WarLion]

also try this

http://homeassistant.local:8123/profile/security

delete all tokens or the ones for android
ej.

[ehinkle27]

just tried again after reinstalling app on phone. Can put in username/password but get unauthorized, but yet the device was added.

and only one device associated with my person

[WarLion]

create a new user and log in with that lest test if all connectios are block

[ehinkle27]

Yea I had went through and deleted all those.

[WarLion]

@ehinkle27

ust tried again after reinstalling app on phone. Can put in username/password but get unauthorized, but yet the device was added.

also check on logs something like (config/home-assistant.log)

Login attempt or request with invalid authentication from

------- edit ------
try deleting all tokens from http://homeassistant.local:8123/profile/security

***sorry if it is spanish but i dont want to change language

after that reboot twice , yes twice your home assistant
homeassistant sometimes delays removal of old device entries and tokens from .storage until after a full cycle

[ehinkle27]

same error with new user. so try deleting all tokens again, and reboot HA twice and then try logging in?

[ehinkle27]

As for the logs, I am not seeing in the logs any invalid auth, I only have errors about one of my devices that i need to try rebooting.
Will delete all these and reboot HA twice.

[WarLion]

did you also remove the devises from Mobile App integration?

there is something a little more risky , deleting the json object of your device on device registry
but you need to be extra carefull here

.storage/core.device_registry
Search for your phone model or sm_s938u1
and remove the object

but is risky so be carefull
after that reboot

[ehinkle27]

I had not but can remove them and reboot twice again, just finished rebooting twice.

[WarLion]

lets check step by step

but please be carefull on the registry

• delete all mobile_app-related device entries from .storage/core.device_registry
• purge all refresh tokens for all users from Settings → People
• remove mobile app integration and all devices
• restart HA twice
• clear app data, unstall companion App reboot phone reinstall HA app
• try login using local IP address

[ehinkle27]

Where is .storage/core.device and I have been using local IP to login.

[WarLion]

is a hidden folder on your config

the second one

[ehinkle27]

How do you get that to show, I am using code server and don’t see that