Passwords app on nextcloud 33

The Basics

  • Nextcloud Server version (e.g., 29.x.x):
    • 33.0.0
  • Operating system and version (e.g., Ubuntu 24.04):
    • Alpine Linux 3.23.3 (from nextcloud AIO docker image)
  • Web server and version (e.g, Apache 2.4.25):
    • apache
  • Reverse proxy and version _(e.g. nginx 1.27.2)
    • nginx proxy manager
  • PHP version (e.g, 8.3):
    • Zend OPcache v8.3.30
  • Is this the first time you’ve seen this error? (Yes / No):
    • yes
  • When did this problem seem to first start?
    • after updating the passwords app. I was on nextcloud version 31 at the time, I think.
  • Installation method (e.g. AlO, NCP, Bare Metal/Archive, etc.)
    • Nextcloud AIO v12.8.0
  • Are you using CloudfIare, mod_security, or similar? (Yes / No)
    • No

Summary of the issue you are facing:

Hello everyone. I’ve been experiencing a problem with the Passwords for nextcloud app for quite some time now. First, I received a message about the termination of support for php version 8.3 (I don’t remember the exact version). The passwords were still viewed, but nothing could be added. I also use the firefox extension along with the app. It’s the same there: you can watch, but you can’t add anything. I decided to wait until the new version of nextcloud AIO v12.8.0 is released (I’m using the docker version). I waited for nextcloud 33 support and upgraded to it. The update went through without any problems. But unfortunately, the app never fully worked. Therefore, I would like to ask for help in this matter. I would be very grateful if someone would respond. To be honest, I do not know what data may be needed to debug this issue, but I am ready to provide everything that is needed.

Steps to replicate it (hint: details matter!):

  1. Try adding a new password in the passwords application tab.

  2. Wait for about 30 seconds

  3. Receive messages in the browser console:

Passwords Error Unable to complete request 
Object { status: "error", id: 0, message: "Unable to complete request", response: Response }

{
  "id": null,
  "username": "test",
  "password": "test",
  "label": "test",
  "url": "",
  "notes": "",
  "customFields": "[]",
  "folder": "00000000-0000-0000-0000-000000000000",
  "edited": 0,
  "hidden": false,
  "trashed": false,
  "favorite": false,
  "cseKey": "",
  "cseType": "none",
  "tags": [],
  "_encrypted": false
}

Log entries

Логи, связанные с приложением password

  Fatal     passwords   OCA\Passwords\Exception\SecurityCheck\InvalidHibpApiResponseException: HIBP API returned invalid responsecURL error 28: Operation             2026-03-07T10:39:04+00:00
                        timed out after 30002 milliseconds with 18468 bytes received (see https://curl.haxx.se/libcurl/c/libcurl-errors.html) for                                              
                        https://api.pwnedpasswords.com/range/6ebc9 at .../Provider/SecurityCheck/HaveIBeenPwnedProvider.php line 180 

php occ passwords:system:report

{
    "version": {
        "server": "33.0.0.16",
        "app": "2026.2.20",
        "lsr": false,
        "php": "8.3.30",
        "cronPhp": "8.3.30"
    },
    "environment": {
        "os": "Linux",
        "architecture": "x86_64",
        "bits": 64,
        "database": "pgsql",
        "cron": "cron",
        "proxy": false,
        "sslProxy": true,
        "subdirectory": false
    },
    "services": {
        "images": "imaginary",
        "favicons": "gl",
        "previews": "default",
        "security": "hibp",
        "words": "auto",
        "previewApi": false,
        "faviconApi": false
    },
    "settings": {
        "channel": "stable",
        "nightlies": true,
        "handbook": false,
        "performance": 5
    },
    "status": {
        "autoBackupStatus": 0
    },
    "apps": {
        "guests": {
            "installed": false,
            "enabled": false
        },
        "occweb": {
            "installed": false,
            "enabled": false
        },
        "theming": {
            "installed": false,
            "enabled": false
        },
        "passman": {
            "installed": false,
            "enabled": false
        },
        "unsplash": {
            "installed": false,
            "enabled": false
        },
        "impersonate": {
            "installed": false,
            "enabled": false
        },
        "passwords_handbook": {
            "installed": false,
            "enabled": false
        }
    },
    "sharing": {
        "shares": 0
    },
    "encryption": {
        "sse": {
            "SSEv1r1": false,
            "SSEv1r2": true,
            "SSEv2r1": false,
            "SSEv3r1": false,
            "none": false,
            "default": "SSEv1r2"
        },
        "cse": {
            "CSEv1r1": false,
            "none": true,
            "default": "none"
        }
    }
}

The error indicates that the connection between your server and the haveibeenpwned api / Cloudflare is too slow to finish within 30s.

You can try to solve that by configuring the “big local db” or “small local db” service for breached passwords checks in the app settings.

If that doesn’t work either, you can generate the breached passwords database locally: https://breached.passwordsapp.org/

Hello. Thank you very much for your advice. I tried to change the settings you specified. The situation seems to have been resolved. Just in case, I’ll test this solution for another day. If there are no problems, I will mark your answer with a solution.

This topic was automatically closed 8 days after the last reply. New replies are no longer allowed.