# Não é possível detectar se sua conta foi criada; certifique-se de que os cookies estão ativados

**URL:** https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626
**Category:** Support
**Created:** [Fevereiro 20, 2019, 8:19am UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626 "2019-02-20T08:19:00Z")
**Posts on this page:** 20
**Page:** 1

<div class="post-metadata">

### Author: ![meetya](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/meetya/32/139401_2.png) [@meetya](https://meta.discourse.org/u/meetya)
#### Post date: [Fevereiro 20, 2019, 8:19am UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/1 "2019-02-20T08:19:00Z")

</div>

Hello Community!

Today I was informed that people can’t create a new account on our discourse page ([https://answerhub.lightact-systems.com](https://answerhub.lightact-systems.com)), because no matter which login option they choose (username/pass, FB, Google, Twitter), they get the following message.

“_We cannot detect if your account was created, please ensure you have cookies enabled._”

I read on another thread that I should make sure that I have “enable local logins via email” setting checked and I do.

 ![image](https://global.discourse-cdn.com/meta/original/3X/c/9/c954a2972c0ecc67413bde56231a6d1d9f8285bd.png)

Does anyone have any ideas on what I can do?

Thanks!  
Mitja

---

<div class="post-metadata">

### Author: ![meetya](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/meetya/32/139401_2.png) [@meetya](https://meta.discourse.org/u/meetya)
#### Post date: [Fevereiro 20, 2019, 8:41am UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/2 "2019-02-20T08:41:01Z")

</div>

To follow up with some of my findings…

I’ve been able to create new user accounts using either browsers devices that I haven’t used before at all. For example, Chrome works only if I disable Syncing or if I am using Incognito mode.

If someone can let me know how to fix this, that would be awesome.

Thanks!

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [Fevereiro 20, 2019, 10:33am UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/3 "2019-02-20T10:33:49Z")

</div>

Sounds like you have unusual browser config or plugins. Try in [safe mode](https://meta.discourse.org/t/53504?silent=true) with plugins disabled, or use a different browser with default settings.

---

<div class="post-metadata">

### Author: ![pfaffman](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/pfaffman/32/120154_2.png) [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [Fevereiro 20, 2019, 12:47pm UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/4 "2019-02-20T12:47:15Z")

</div>

How did you install? Do you have a reverse proxy that might be interfering?

---

<div class="post-metadata">

### Author: ![meetya](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/meetya/32/139401_2.png) [@meetya](https://meta.discourse.org/u/meetya)
#### Post date: [Fevereiro 20, 2019, 12:57pm UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/5 "2019-02-20T12:57:11Z")

</div>

> [@pfaffman](#):
>
> How did you install? Do you have a reverse proxy…

I don’t even know what ‘reverse proxy’ is. 🙂

I installed it on a Digital Ocean droplet with a standard procedure described somewhere on these forums.

> [@codinghorror](#):
>
> Sounds like you have unusual browser config or plugins.

It’s quite possible that it is something like that but on my 2 PCs, it happens on both Chrome (that I regularly use and has lots of extensions and stuff) and on Edge (that I use only for debugging and similar things). Actually, I heard about this from our client from Berlin, who also reported this, so it might not be so unusual after all.

Thanks for your suggestions.

p.s. I’m not sure if that’s too much to ask, but would you guys try to login using Chrome, for example and tell me if it works?

---

<div class="post-metadata">

### Author: ![pfaffman](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/pfaffman/32/120154_2.png) [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [Fevereiro 20, 2019, 1:00pm UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/6 "2019-02-20T13:00:57Z")

</div>

I got logged in on my phone. Browser plugins seem like the most likely culprit.

---

<div class="post-metadata">

### Author: ![tisawyer](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/tisawyer/32/127435_2.png) [@tisawyer](https://meta.discourse.org/u/tisawyer)
#### Post date: [Março 1, 2019, 3:31am UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/7 "2019-03-01T03:31:41Z")

</div>

I’m getting this message with Chrome:

 ![28%20PM](https://global.discourse-cdn.com/meta/original/3X/9/1/91fc7a8943a53bd433abd101db75cb24468434a6.png)

But Safari correctly responds with:

 ![13%20PM](https://global.discourse-cdn.com/meta/original/3X/4/d/4dd44b16879985cb24547459cba79abd677b64c5.png)

Except I wouldn’t think it would say an existing email address was good while typing it in and then reject is after pressing ‘Create New Account’.

---

<div class="post-metadata">

### Author: ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)
#### Post date: [Março 1, 2019, 3:35am UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/8 "2019-03-01T03:35:39Z")

</div>

Looks to me like you have cookies disabled for your discourse site in chrome using some sort of extension.

---

<div class="post-metadata">

### Author: ![tisawyer](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/tisawyer/32/127435_2.png) [@tisawyer](https://meta.discourse.org/u/tisawyer)
#### Post date: [Março 1, 2019, 4:07am UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/9 "2019-03-01T04:07:32Z")

</div>

You are correct. It’s some Chrome extension.

---

<div class="post-metadata">

### Author: ![permute](https://avatars.discourse-cdn.com/v4/letter/p/b487fb/32.png) [@permute](https://meta.discourse.org/u/permute)
#### Post date: [Maio 29, 2019, 2:17pm UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/10 "2019-05-29T14:17:34Z")

</div>

Users are having the same problem on a forum I’ve created, and I have personally encountered the issue. Removed every Chrome extension from the browser, but the issue has also surfaced on other browsers. It seems incognito mode helps in 90% of the cases but even going that way is not certain to work.

A week ago I tried to create an account here, to further the discussion and was met with the following:

 ![Discourse%20account%20creation%20failure](https://global.discourse-cdn.com/meta/original/3X/a/6/a63ba84511c02cafd84a4e9e867e21559c582bcd.png)

However, I was able to create the account today without any issues -same browser (Chrome).

Any new idea what can be the cause for this?

Telling new users they have to use incognito or try other browsers if the account creation failed just doesn’t seem like a great option.

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [Maio 29, 2019, 8:18pm UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/11 "2019-05-29T20:18:34Z")

</div>

I can’t repro this in Chrome. Perhaps there is something on your network, router, or in your local “anti-virus” software that is interfering.

---

<div class="post-metadata">

### Author: ![Bas](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/bas/32/294929_2.png) [@Bas](https://meta.discourse.org/u/Bas)
#### Post date: [Junho 20, 2019, 2:53pm UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/12 "2019-06-20T14:53:53Z")

</div>

**tl;dr** _Discourse thinks Chrome is a spambot_

We also encountered this issue and think we know what’s causing it.  
(Major thanks here to @RGJ for some impressive detective work)

1. The Discourse signup form contains a field called `password_confirmation`; this is a hidden field, meant to trip up spammers.
2. Chrome pre-fills passwords for known domains, it promptly fills in `password_confirmation`
3. Discourse sees a value it doesn’t expect in its honeypot and denies access

So yeah, difficult issue to track down, since

- clean installs don’t have the behaviour (since no password is stored)
- incognito mode doesn’t have the behaviour (since it doesn’t pre-fill values)
- inspector looks normal (since you expect a password field to be filled)
- other browser don’t trigger it
- not all users will have passwords saved
- there doesn’t seem to be a setting to disable the honeypot
- the error message is (probably deliberately) extremely vague

Seems clear that the culprit is Chrome itself. That said, with that browser having major marketshare, it might be good for Discourse to roll with the punches and create a workaround/fix?

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [Junho 20, 2019, 2:59pm UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/13 "2019-06-20T14:59:51Z")

</div>

> [@Bas](#):
>
> this is a hidden field, meant to trip up spammers.

No such feature exists for signup user “spam” prevention. While it is an interesting theory, it has no basis in reality. Sorry.

If the account is not created, this is usually due to oddball “privacy” plugins the user has active in my experience. Try in a different clean browser install with no modifications, customizations, or plugins.

---

<div class="post-metadata">

### Author: ![Bas](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/bas/32/294929_2.png) [@Bas](https://meta.discourse.org/u/Bas)
#### Post date: [Junho 20, 2019, 3:45pm UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/14 "2019-06-20T15:45:30Z")

</div>

Huh?

I’m talking about this field:

 ![29](https://global.discourse-cdn.com/meta/original/3X/c/d/cdbb45ecd355ac105da1593479e3103d274e1294.png)

Generated by this piece of code:  
[https://github.com/discourse/discourse/blob/master/app/views/users/activate\_account.html.erb#L7](https://github.com/discourse/discourse/blob/master/app/views/users/activate_account.html.erb#L7)

Validated by this controller:

> <https://github.com/discourse/discourse/blob/main/app/controllers/users_controller.rb#L1230-L1234>

Which is also present when I inspect Meta, in Safari

 ![20](https://global.discourse-cdn.com/meta/original/3X/4/c/4cb45671a644269bbe1a183e4ab716a09925dd52.png)

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [Junho 20, 2019, 4:14pm UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/15 "2019-06-20T16:14:32Z")

</div>

I’ll just keep repeating this until you hear me:

> [@codinghorror](#):
>
> No such feature exists for signup user “spam” prevention. While it is an interesting theory, it has no basis in reality. Sorry.
> 
> If the account is not created, this is usually due to oddball “privacy” plugins the user has active in my experience. Try in a different clean browser install with no modifications, customizations, or plugins.

See above text. **There is no broken “spam” user account check.** There are only broken browser configurations created by users. If you can repro in a clean browser, no plugins, no add-ins, no browser setting changes, let us know.

---

<div class="post-metadata">

### Author: ![Bas](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/bas/32/294929_2.png) [@Bas](https://meta.discourse.org/u/Bas)
#### Post date: [Junho 20, 2019, 4:18pm UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/16 "2019-06-20T16:18:42Z")

</div>

> [@codinghorror](#):
>
> There are only broken browser configurations created by users.

WOW, that is quite a statement.

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [Junho 20, 2019, 4:19pm UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/17 "2019-06-20T16:19:11Z")

</div>

Give me a repro in Chrome. I run totally stock. I’ll be waiting here for your repro steps.

---

<div class="post-metadata">

### Author: ![Boost](https://avatars.discourse-cdn.com/v4/letter/b/8e8cbc/32.png) [@Boost](https://meta.discourse.org/u/Boost)
#### Post date: [Junho 20, 2019, 8:12pm UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/18 "2019-06-20T20:12:29Z")

</div>

I had a guy reporting the same issue ( _We cannot detect if your account was created_…). I suggested using incognito mode and that worked for them. They also said that they had a bunch of plugins in their browser, which was likely the problem as I haven’t had anyone else complain about not being able to register.

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [Junho 24, 2019, 10:12pm UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/19 "2019-06-24T22:12:14Z")

</div>

I believe one example plugin known to cause this is Privacy Badger. It’s best to report the issues to the people who make the plugins, so they can fix the plugins.

---

<div class="post-metadata">

### Author: ![Stephen](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/stephen/32/95011_2.png) [@Stephen](https://meta.discourse.org/u/Stephen)
#### Post date: [Junho 24, 2019, 11:32pm UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/20 "2019-06-24T23:32:29Z")

</div>

Discourse shouldn’t need to support or differentiate between browser plugins altering the page, and malicious code creating spam users.

If you insist on using something which interferes with the page, you accept any undesirable consequences which come along with it. Convenience isn’t a defence for asking for more work be done, not does it constitute a bug.

[Próxima página](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626.md?page=2)
