Why is this not seen by any HA staff. It’s really annoying and there is no real issue to be found.
Goes in line with the ongoing problems that seem to be related IMHO to the Apple HA app. Had it recently with family visitor that she got logged out every few hours (between less than one and more than 24) from HA in her Apple devices. Then I got the notification of an invalid login from 127.0.0.1 - which I get occasionally, now attribute it to Apple.
Though our only other Apple devices don’t fail to login, from what I read, I assume that the device fails to login with “cached” information and then recovers somehow and logs in.
I’m amateur, no expert, and for me it’s not a WTH … but only as I don’t bother much about Apple… But it seems rather a base-functionality being buggy here? And cause Apple users to WTH this?
Please don’t open WTH about issues in github without resolution. WTH are for feature requests, not for bumping ignored issues.
All I can say is, the only times I’ve seen that error log in my instance is when bots were trying to brute-force access and HA did what it had to do. If this were a widespread issue, then there would be way more forum posts (outside the WTH month) about it, given that it was originally reported in April.
Happens also on Android, but the problem is not always reproducible, I think that is reason why it is “low prio”
But I got kick out of local instance today and I could just fix it because I have an VPN to my home, otherwise I would have not be able to check anything for a week!
1 Like
Login failure happen if you log in to one account on one device and then login to the same account on different device OR login to different HA. If you clear cache before login there will be no failure message.
Personally I have not put any credentials in my phone for more than a year I think, It stills bans me from time to time.
I have external URL and Local URL credentials.
Go to Profile / Security - there are tokens. I think that this is something with this. After you are succesfully login to one account on one device there is token, and if you try to log in on second device to same account login and password is ok but token is incorrect. Same if you try login on second HA instance where you have same login and password.
“Share your “What the heck?!” moment or discuss/vote those of others.” 
IMHO it (better) is expressly not just about feature requests, but about what WTH moments happened and why they could not be resolved (or rather difficult). So giving the response IMHO would be quite contrary to sharing WTH moments? The best WTH is what could not be easily resolved with a feature request?
To not flood it, I for example shared the one WTH moment of 2024 that made it to the top of my personal list (Doorbell communication). 
