# We cannot detect if your account was created, please ensure you have cookies enabled

**URL:** https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626
**Category:** Support
**Created:** [20 februari 2019 om 08:19 UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626 "2019-02-20T08:19:00Z")
**Posts on this page:** 20
**Page:** 3

<div class="post-metadata">

### Author: ![Bas](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/bas/32/294929_2.png) [@Bas](https://meta.discourse.org/u/Bas)
#### Post date: [5 juli 2019 om 09:54 UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/42 "2019-07-05T09:54:46Z")

</div>

> [@codinghorror](#):
>
> So you can repro this is a clean install of Chrome with no plugins on [try.discourse.org](http://try.discourse.org)? I am unclear. If you can, please list the steps so we can also repro.

No, I can not, sorry about the confusion. Just saying that asking for a repro on meta (or using incognito) won’t work, since (in my case) it was related to stored passwords.

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [5 juli 2019 om 15:30 UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/43 "2019-07-05T15:30:38Z")

</div>

When you say “stored passwords” do you mean stored through Chrome or some third party plugin? Because I use the built in Chrome password storage and I’ve never seen any issues.

---

<div class="post-metadata">

### Author: ![pctweakz](https://avatars.discourse-cdn.com/v4/letter/p/c4cdca/32.png) [@pctweakz](https://meta.discourse.org/u/pctweakz)
#### Post date: [6 juli 2019 om 04:49 UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/44 "2019-07-06T04:49:03Z")

</div>

I too am having this issue, unfortunately. New to discourse myself and was testing the sign up feature on my new forum to make sure that the activation emails were going through OK when I was presented with this very issue.

I tried turning off uBlockOrigin and Adblocker Pro. I’m not sure if this could be SessionBuddy or BitWarden - All of which are chrome plug-ins I have installed.

Funny enough, to make this comment, I had to sign up for this forum. I was presented with the exact same problem and had to use chrome in Incognito mode to get passed the issue. I’m sure it’s something on the chrome plug in side of things, hope there is some kind of work around or that someone is able to reproduce the issue.

---

<div class="post-metadata">

### Author: ![pfaffman](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/pfaffman/32/120154_2.png) [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [6 juli 2019 om 12:49 UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/45 "2019-07-06T12:49:12Z")

</div>

Try disabling the other plugins and see which one it is. It’s pretty clear that the problem is the plugin,so that’s what to fix.

---

<div class="post-metadata">

### Author: ![riking](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/riking/32/170938_2.png) [@riking](https://meta.discourse.org/u/riking)
#### Post date: [6 juli 2019 om 18:44 UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/46 "2019-07-06T18:44:29Z")

</div>

The list of active browser extensions will help out a lot in narrowing down this issue.

---

<div class="post-metadata">

### Author: ![Bas](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/bas/32/294929_2.png) [@Bas](https://meta.discourse.org/u/Bas)
#### Post date: [8 juli 2019 om 07:16 UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/47 "2019-07-08T07:16:21Z")

</div>

> [@codinghorror](#):
>
> “stored passwords” do you mean stored through Chrome

Stored through Chrome; issue still occurred with any and all extensions disabled.  
I don’t run any password extension plugins on Chrome.  
But no, I can’t repro it on meta

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [8 juli 2019 om 09:03 UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/48 "2019-07-08T09:03:14Z")

</div>

Can you repro it on [try.discourse.org](http://try.discourse.org)? Is the version of Discourse you are testing against old or out of date? Are there unusual Discourse plugins installed? Does it repro in Chrome [safe mode](https://meta.discourse.org/t/53504?silent=true)?

---

<div class="post-metadata">

### Author: ![Bas](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/bas/32/294929_2.png) [@Bas](https://meta.discourse.org/u/Bas)
#### Post date: [8 juli 2019 om 09:48 UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/49 "2019-07-08T09:48:43Z")

</div>

> [@codinghorror](#):
>
> Can you repro it on [try.discourse.org](http://try.discourse.org)?

Tried, but couldn’t

> [@codinghorror](#):
>
> Is the version of Discourse you are testing against old or out of date?

It’s one major version behind, 2.2.3. Issue popped up after recent upgrade from 2.1

> [@codinghorror](#):
>
> Are there unusual Discourse plugins installed?

Yes, many, including custom ones for us. Don’t _think_ any would interfere with the login screen, other than styling, apart from the Google/Linkedin/OAuth ones.

> [@codinghorror](#):
>
> Does it repro in Chrome [safe mode](https://meta.discourse.org/t/53504?silent=true)?

As far as I can tell, Chrome uses Incognito mode as their “[safe mode](https://meta.discourse.org/t/53504?silent=true)”, this didn’t allow me to repro initially since it doesn’t pre-fill the password.

For me the issue is settled enough. It’s really really hard to repro (can’t even seem to repro it on our instance anymore) and the repro-path that I did have will not likely be encountered by my users (since you’d need to attempt to sign up while already having a saved account). We’ve solved it with an extended warning.

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [9 juli 2019 om 02:58 UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/50 "2019-07-09T02:58:45Z")

</div>

> [@Bas](#):
>
> can’t even seem to repro it on our instance anymore

Oh that’s weird. Outside the rogue browser plugins, which I _know_ can cause this, I’m not sure.

---

<div class="post-metadata">

### Author: ![Lykos](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/lykos/32/124506_2.png) [@Lykos](https://meta.discourse.org/u/Lykos)
#### Post date: [17 juli 2019 om 21:42 UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/51 "2019-07-17T21:42:58Z")

</div>

Just chiming in that my users are also encountering this issue… Not really awesome on a brand new forum launch. In a panic now trying to figure out a solution, or if we just migrate the 1k~ users accounts.

- Discourse installed via Droplet via DigitalOcean.
- CloudFlare and cloudflare.template.yml
- I can signup multiple times with Chrome no problem.
- User reports can signup at [try.discourse.org](http://try.discourse.org) no problem
- Users extensions (Gets error): [https://cdn.discordapp.com/attachments/257972166413254656/601166506063167643/unknown.png](https://cdn.discordapp.com/attachments/257972166413254656/601166506063167643/unknown.png)
- My extensions (No error): [https://cdn.discordapp.com/attachments/257972166413254656/601166669368262679/unknown.png](https://cdn.discordapp.com/attachments/257972166413254656/601166669368262679/unknown.png)
- Discourse version: [v2.4.0.beta2 +33](https://github.com/discourse/discourse/compare/514aaacdf486613bda49f8c729867926fbceb174...tests-passed)

Discourse with errors: [https://boards.neocron.org](https://boards.neocron.org)

Anything else that I can provide?

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [17 juli 2019 om 23:01 UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/52 "2019-07-17T23:01:19Z")

</div>

Does it work in browser [safe mode](https://meta.discourse.org/t/53504?silent=true)? If so, then it’s 100% a broken browser plugin.

If your Discourse site is using third party extensions, it’s possibly that as well, especially if the user can sign up at [try.discourse.org](http://try.discourse.org) no problem.

---

<div class="post-metadata">

### Author: ![pfaffman](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/pfaffman/32/120154_2.png) [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [18 juli 2019 om 10:21 UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/53 "2019-07-18T10:21:56Z")

</div>

If the users extensions gives an error the problem is the user’s extensions. It’s the user’s fault.

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [18 juli 2019 om 10:24 UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/54 "2019-07-18T10:24:02Z")

</div>

There is an exception here, if they can’t repro on [try.discourse.org](http://try.discourse.org) but they _can_ repro on their own site, it could be a plugin or config issue with their Discourse.

---

<div class="post-metadata">

### Author: ![eatcodetravel](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/eatcodetravel/32/94385_2.png) [@eatcodetravel](https://meta.discourse.org/u/eatcodetravel)
#### Post date: [18 juli 2019 om 16:09 UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/55 "2019-07-18T16:09:06Z")

</div>

We did a webinar to show people how to use our community [https://community.debtcollective.org](https://community.debtcollective.org/) and they reported this issue. This is the first time we got this error and I want to know what could be the cause to fix it.

If it’s a user extension, then we need to find a workaround because not everyone will be reporting this issue to us and we won’t know when users get this error either.

I saw this from @sam

> [@We cannot detect if your account was created, please ensure you have cookies enabled](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/22):
>
> My general fix for this is to add autocomplete: discourse but I don’t think this is correct in this case. This is actually not exactly the same as this broken chrome behavior: [https://bugs.chromium.org/p/chromium/issues/detail?id=587466](https://bugs.chromium.org/p/chromium/issues/detail?id=587466) Somehow, some extension is adding text to new-account-challenge after we explicitly set it from here: [discourse/app/assets/javascripts/discourse/controllers/create-account.js.es6 at 6de254f64263d7e3cc223404348c03e23c85d904 · discourse/discourse · GitHub](https://github.com/discourse/discourse/blob/6de254f64263d7e3cc223404348c03e23c85d904/app/assets/javascripts/discourse/controllers/create-account.js.es6#L196-L199) This i…

So the issue is someone (user/script/extension) is adding text to `new-account-challenge` field?

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [18 juli 2019 om 21:40 UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/56 "2019-07-18T21:40:25Z")

</div>

Possibly, see if you can find a repro, then you could report the broken behavior back to the plugin authors.

---

<div class="post-metadata">

### Author: ![Lykos](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/lykos/32/124506_2.png) [@Lykos](https://meta.discourse.org/u/Lykos)
#### Post date: [19 juli 2019 om 02:05 UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/57 "2019-07-19T02:05:19Z")

</div>

There is no error from an extension. The error comes from Discourse telling us it doesn’t know if the account was created. The two users encountering the error have totally different extension setups. In fact, none overlap… To call it an extension error when no extensions overlap is silly. The only common ground they have is Chrome. We have ruled out location also, as one is in the US, another is in Germany. They both have straight through connections to the internet, no VPN.

We have an issue rolling about this here → [New forum is busted and support osticket site is "offline" so i can't submit it there · Issue #363 · Neocron-Classic/issue-tracker · GitHub](https://github.com/NCC-Lykos/neocron-classic/issues/363)

Our current workaround is telling people to use a different browser or a private tab.

One member did raise a question though, why cookies during registration? Just curious.

@eatcodetravel do you mind sharing the plugins you are using on your Discourse? Maybe we can find something in common?

```plaintext
          - git clone https://github.com/discourse/discourse-voting.git
          - git clone https://github.com/discourse/discourse-solved.git
          - git clone https://github.com/discourse/discourse-chat-integration.git
          - git clone https://github.com/gdpelican/retort.git
          - git clone https://github.com/singerscreations/discourse-stopforumspam.git
          - git clone https://github.com/discourse/discourse-policy.git
          - git clone https://github.com/Ebsy/discourse-nationalflags.git
          - git clone https://github.com/discourse/discourse-math.git
          - git clone https://github.com/discourse/discourse-spoiler-alert.git
          - git clone https://github.com/discourse/discourse-akismet.git
          - git clone https://github.com/discourse/discourse-canned-replies.git
          - git clone https://github.com/discourse/discourse-signatures
          - git clone https://github.com/sudaraka94/preventing-malicious-linking-plugin.git
          - git clone https://github.com/jannolii/discourse-topic-trade-buttons.git
          - git clone https://github.com/featheredtoast/discourse-pwned-passwords.git
          - git clone https://github.com/angusmcleod/discourse-events.git
          - git clone https://github.com/discourse/Discourse-Tiles-image-gallery.git

```

The malicious links plugin is currently disabled pending setup.

---

<div class="post-metadata">

### Author: ![eatcodetravel](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/eatcodetravel/32/94385_2.png) [@eatcodetravel](https://meta.discourse.org/u/eatcodetravel)
#### Post date: [19 juli 2019 om 03:53 UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/58 "2019-07-19T03:53:21Z")

</div>

We don’t have many plugins installed, and most of these are extensions made by us.

> <https://github.com/debtcollective/ds-terraform/blob/master/modules/compute/services/discourse/web.yml#L48-L60>

---

<div class="post-metadata">

### Author: ![Stephen](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/stephen/32/95011_2.png) [@Stephen](https://meta.discourse.org/u/Stephen)
#### Post date: [19 juli 2019 om 06:54 UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/59 "2019-07-19T06:54:24Z")

</div>

> [@Lykos](#):
>
> To call it an extension error when no extensions overlap is silly

This assumes that all extensions behave in a unique fashion and share no common code of approaches, which is _very_ silly.

> [@Lykos](#):
>
> One member did raise a question though, why cookies during registration?

The message mentions cookies, but it has occurred on machines where cookies are enabled because the contents of a hidden `<input>` are being tampered with.

---

<div class="post-metadata">

### Author: ![Lykos](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/lykos/32/124506_2.png) [@Lykos](https://meta.discourse.org/u/Lykos)
#### Post date: [19 juli 2019 om 15:55 UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/60 "2019-07-19T15:55:35Z")

</div>

> [@Stephen](#):
>
> This assumes that all extensions behave in a unique fashion and share no common code of approaches, which is _very_ silly.

For a new modern forum software to be so sensitive to a plugin that it causes issues that nobody can catch is _extremely_ silly. We had no such issues with vBulletin, PHPBB and others. We switched to Discourse to simplify our entire setup.

One of our users with the error has tracked this down…

```plaintext
boards.neocron.org/:1 Refused to load the script 'https://boards.neocron.org/cdn-cgi/apps/head/QNWX_8GN-3K7wUr6Qa73LdoD3JI.js' because it violates the following Content Security Policy directive: "script-src 'unsafe-eval' 'report-sample' https://boards.neocron.org/logs/ https://boards.neocron.org/sidekiq/ https://boards.neocron.org/mini-profiler-resources/ https://boards.neocron.org/assets/ https://boards.neocron.org/brotli_asset/ https://boards.neocron.org/extra-locales/ https://boards.neocron.org/highlight-js/ https://boards.neocron.org/javascripts/ https://boards.neocron.org/plugins/ https://boards.neocron.org/theme-javascripts/ https://boards.neocron.org/svg-sprite/ https://www.google-analytics.com/analytics.js". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.

account-created:1 Refused to load the script 'https://boards.neocron.org/cdn-cgi/apps/head/QNWX_8GN-3K7wUr6Qa73LdoD3JI.js' because it violates the following Content Security Policy directive: "script-src 'unsafe-eval' 'report-sample' https://boards.neocron.org/logs/ https://boards.neocron.org/sidekiq/ https://boards.neocron.org/mini-profiler-resources/ https://boards.neocron.org/assets/ https://boards.neocron.org/brotli_asset/ https://boards.neocron.org/extra-locales/ https://boards.neocron.org/highlight-js/ https://boards.neocron.org/javascripts/ https://boards.neocron.org/plugins/ https://boards.neocron.org/theme-javascripts/ https://boards.neocron.org/svg-sprite/ https://www.google-analytics.com/analytics.js". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.

```

[https://github.com/NCC-Lykos/neocron-classic/issues/363#issuecomment-513189051](https://github.com/NCC-Lykos/neocron-classic/issues/363#issuecomment-513189051)

Looks to be a CORS problem possibly, I’m going to look into that deeper but wanted to ask if @eatcodetravel had any CORS settings or issues also?

---

<div class="post-metadata">

### Author: ![eatcodetravel](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/eatcodetravel/32/94385_2.png) [@eatcodetravel](https://meta.discourse.org/u/eatcodetravel)
#### Post date: [19 juli 2019 om 16:29 UTC](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626/61 "2019-07-19T16:29:24Z")

</div>

> [@Stephen](#):
>
> The message mentions cookies, but it has occurred on machines where cookies are enabled because the contents of a hidden `<input>` are being tampered with.

Can you provide more information on this? Which inputs are the ones that trigger this issue?

[Previous page](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626.md?page=2)

[Next page](https://meta.discourse.org/t/we-cannot-detect-if-your-account-was-created-please-ensure-you-have-cookies-enabled/109626.md?page=4)
