> For the complete documentation index, see [llms.txt](https://docs.devolutions.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.devolutions.net/password-manager/knowledge-base/browser-extension-knowledge-base/troubleshooting-devolutions-password-manager-browser-extension-disconnects.md).

# Troubleshooting Devolutions Password Manager browser extension disconnects

If the Devolutions Password Manager browser extension unexpectedly signs you out of Devolutions Cloud or Devolutions Server, this article explains what the disconnect banner means and what to check.

{% hint style="info" %}
Some disconnect messages were introduced in version 2026.2.3.5. Older versions do not display the same messages.
{% endhint %}

Look for the disconnect banner:

<figure><img src="https://cdnweb.devolutions.net/docs/WBEX2002_2026_2.png" alt=""><figcaption></figcaption></figure>

Compare the reason shown in the banner with the table below, then select the corresponding reason to go directly to its explanation and recommended troubleshooting steps.

### Devolutions Cloud

<table data-search="false"><thead><tr><th width="393">Banner message</th><th>Cause</th></tr></thead><tbody><tr><td><strong>Disconnected - Session expired</strong></td><td><a href="/pages/klX3r3UwGSh1fzDZbaCV#refresh-token-lifetime">Refresh token expired</a></td></tr><tr><td><strong>Disconnected - Force prompt login</strong></td><td><a href="/pages/klX3r3UwGSh1fzDZbaCV#force-prompt-login">Force prompt login</a></td></tr><tr><td><strong>Your SSO provider signed you out. Please reconnect to continue.</strong></td><td><a href="/pages/klX3r3UwGSh1fzDZbaCV#single-sign-on-sso">Single sign-on (SSO) disconnect</a></td></tr><tr><td><strong>You have been disconnected due to inactivity.</strong></td><td><a href="/pages/klX3r3UwGSh1fzDZbaCV#inactivity-timeout">Inactivity timeout</a></td></tr><tr><td><strong>Disconnected - The user is disabled</strong></td><td><a href="/pages/klX3r3UwGSh1fzDZbaCV#user-disabled-or-expired">Account disabled or expired</a></td></tr><tr><td><strong>Disconnected - Unable to refresh the current token or obtain a new one.</strong></td><td><a href="#invalid-token-after-token-refresh">Invalid token after token refresh</a></td></tr><tr><td><strong>Disconnected - Unable to refresh the current token or obtain a new one.</strong><br><strong>Show details</strong></td><td><a href="#error-during-token-refresh">Error during token refresh</a></td></tr></tbody></table>

### Devolutions Server

<table><thead><tr><th width="394">Banner message</th><th>Cause</th></tr></thead><tbody><tr><td><strong>You have been disconnected due to a server configuration or administrator action, please contact your administrator for more details.</strong><br><strong>Show details</strong></td><td><a href="#ambiguous-disconnect-causes">Multiple causes possible</a></td></tr><tr><td><strong>Your SSO provider signed you out. Please reconnect to continue.</strong></td><td><a href="/pages/klX3r3UwGSh1fzDZbaCV#single-sign-on-sso-disconnect">Single sign-on (SSO) disconnect</a></td></tr><tr><td><strong>You have been disconnected due to inactivity.</strong></td><td><a href="/pages/klX3r3UwGSh1fzDZbaCV#server-inactivity-timeout">Inactivity timeout</a></td></tr><tr><td><strong>Disconnected - Force prompt login</strong></td><td><a href="/pages/klX3r3UwGSh1fzDZbaCV#disconnect-on-close">Disconnect on close</a></td></tr><tr><td><strong>Disconnected - Unable to refresh the current token or obtain a new one.</strong></td><td><a href="#invalid-token-after-token-refresh">Invalid token after token refresh</a></td></tr><tr><td><strong>Disconnected - Unable to refresh the current token or obtain a new one.</strong><br><strong>Show details</strong></td><td><a href="#error-during-token-refresh">Error during token refresh</a></td></tr></tbody></table>

### Ambiguous disconnect causes

These disconnects do not have a fixed error code or description, so the displayed message may not accurately identify the underlying cause.

To debug this category of disconnect, click **Show details** and compare the error and error description with the entries below.

<figure><img src="https://cdnweb.devolutions.net/docs/WBEX2003_2026_2.png" alt=""><figcaption></figcaption></figure>

<figure><img src="https://cdnweb.devolutions.net/docs/WBEX2004_2026_2.png" alt=""><figcaption></figcaption></figure>

<table><thead><tr><th width="155">Error</th><th width="300">Error description</th><th>Cause</th></tr></thead><tbody><tr><td><code>login_required</code></td><td>The specified refresh token is no longer valid</td><td><a href="/pages/klX3r3UwGSh1fzDZbaCV#refresh-token-expired">Refresh token expired</a></td></tr><tr><td><code>login_required</code></td><td>Token is invalid</td><td><a href="/pages/klX3r3UwGSh1fzDZbaCV#ip-address-invalid">IP address changed</a></td></tr><tr><td><code>invalid_grant</code></td><td>The authorization associated with the refresh token is no longer valid.</td><td><a href="/pages/klX3r3UwGSh1fzDZbaCV#force-disconnect">Session revoked by an administrator</a></td></tr></tbody></table>

### Extension-specific disconnect causes

#### Invalid token after token refresh

This happens when the token refresh succeeds, but the next call returns a 401 error saying that the new token is invalid. To avoid an infinite loop, the browser extension disconnects.

#### Error during token refresh

This happens when a non-success status is returned during a token refresh. The exact non-success status appears as an error under ***Show details***.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.devolutions.net/password-manager/knowledge-base/browser-extension-knowledge-base/troubleshooting-devolutions-password-manager-browser-extension-disconnects.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.