# Login Loop - CSRF Check Failed on ALL Fresh Login Attempts (Internal AND External) with Cloudflare Tunnel

**URL:** <https://help.nextcloud.com/t/login-loop-csrf-check-failed-on-all-fresh-login-attempts-internal-and-external-with-cloudflare-tunnel/241338>\
**Category:** 📦 Appliances (Docker, Snappy, VM, NCP, AIO)\
**Tags:** nc32, docker, cloudflare, setup\_warning\
**Created:** [March 4, 2026, 6:30pm UTC](https://help.nextcloud.com/t/login-loop-csrf-check-failed-on-all-fresh-login-attempts-internal-and-external-with-cloudflare-tunnel/241338 "2026-03-04T18:30:25Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![jtr](https://help.nextcloud.com/letter_avatar/jtr/32/6_22734026db12803ebb3e059622ac3534.png) [@jtr](https://help.nextcloud.com/u/jtr)\
**Post date:** [March 4, 2026, 7:30pm UTC](https://help.nextcloud.com/t/login-loop-csrf-check-failed-on-all-fresh-login-attempts-internal-and-external-with-cloudflare-tunnel/241338/2 "2026-03-04T19:30:07Z")

</div>

Please make sure to use `occ config:list system` to view your merged configuration (particularly since most of the Docker images used multiple config files).

Steps are described in the [support template](https://help.nextcloud.com/t/support-template-please-use-this-when-you-request-support/137402).

Also make sure Cloudflare’s Rocket Loader feature is off.

---

_[View the full topic](https://help.nextcloud.com/t/login-loop-csrf-check-failed-on-all-fresh-login-attempts-internal-and-external-with-cloudflare-tunnel/241338)._