rclone / rclone/rclone

Sign in failure (wrong password attempt) on ProtonDrive for passwords with special characters

Open
#8,993 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Go
Stars
59.8k
Forks
5.4k
Avg merge
2d 14h
Merged PRs (30d)
48

Description

I have configured rclone according to "rclone config" for proton-drive using a password in the style of: ÂMÂdÈT¤¤ç]?×Ð#è9ñdã*Û+PM#.(©Ýº:?/¬+àì±ÕA'#¿ .

When trying to test the connection it fails:

OOO@UUU:/srv# rclone lsd proton:
2025/11/23 15:33:41.294117 WARN RESTY 401 GET https://mail.proton.me/api/core/v4/users: Invalid access token (Code=401, Status=401), Attempt 1
2025/11/23 15:33:41.294420 ERROR RESTY 401 GET https://mail.proton.me/api/core/v4/users: Invalid access token (Code=401, Status=401)
2025/11/23 15:33:41.388511 WARN RESTY 422 POST https://mail.proton.me/api/auth/v4/refresh: Invalid refresh token (Code=10013, Status=422), Attempt 1
2025/11/23 15:33:41.388576 ERROR RESTY 422 POST https://mail.proton.me/api/auth/v4/refresh: Invalid refresh token (Code=10013, Status=422)
2025/11/23 15:33:48.995680 WARN RESTY 422 POST https://mail.proton.me/api/auth/v4: Incorrect login credentials. Please try again. (Code=8002, Status=422), Attempt 1
2025/11/23 15:33:48.995738 ERROR RESTY 422 POST https://mail.proton.me/api/auth/v4: Incorrect login credentials. Please try again. (Code=8002, Status=422)
2025/11/23 15:33:48 Failed to create file system for "proton:": couldn't initialize a new proton drive instance: 422 POST https://mail.proton.me/api/auth/v4: Incorrect login credentials. Please try again. (Code=8002, Status=422)

I tried on different machines with different versions - with the same result. On Proton I get the error:

Sign in failure (wrong password) (attempt)
Nov 23, 2025, 3:33 PM
rclone
macos-drive
1.0.0-alpha.1+rclone

The password was definetly copied right, 2FA as well.

I changed my password got rid of special characters like " ' ` - same result. So I got rid of all special characters, except ? # $ (I think) - which worked.

[XXX@YYY:~]$ rclone --version
rclone v1.71.2
- os/version: nixos 25.11 (64 bit)
- os/kernel: 6.17.5 (x86_64)
- os/type: linux
- os/arch: amd64
- go/version: go1.25.2
- go/linking: dynamic
- go/tags: cmount

AAA@BBB:/srv# rclone --version
rclone v1.65.2
- os/version: turrisos 7.2.3
- os/kernel: 5.15.148 (armv7l)
- os/type: linux
- os/arch: arm (ARMv7 compatible)
- go/version: go1.19.13
- go/linking: dynamic
- go/tags: none

On mail-clients or through web-login my more sophisticated passwords are fine, and I don't consider it as a beautiful solution to use something less secure for rclone - maybe I did something wrong - but to me it seemed like a bug.

Thanks and have a great day.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reproducing the failure with rclone config and rclone lsd proton: using a password containing the reported special characters. Review the Proton Drive authentication requests shown in the log, especially /api/auth/v4 and /api/auth/v4/refresh, and compare them with a password that succeeds. Done means authentication works without weakening the password and the relevant behavior is covered by a reproducible check.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
authentication, cloud
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.