Fix sync and sign-in problems

The server address is refused

Use https://. Plain http:// works only for a server on the same computer, and never on the phone.

“Offline. Changes are kept and sent when the server is reachable.”

Nothing is lost; changes wait on the device. Check the address and the server’s health with curl -sf https://<server>/healthz.

A sync asks about removing many items

Another device or the server removed more than 20 items, or most of one kind. Nothing is removed until you choose. Keep my local data is the safe answer, and sends your items back to the server.

“The server sent an older version of N items”

This device kept its newer version. If it keeps happening, the server may have been tampered with, so tell its administrator.

Sign-in fails with a key-derivation error

Sternway refuses when the server asks for less password-hashing work than before, or below the minimum, so a server can’t make your password cheaper to guess. The server is misconfigured or tampered with.

You forgot the account password

Choose Settings › Account & Sync › Recover with a recovery kit and use your kit’s key. Without a kit, nobody can recover the encrypted data, though devices still signed in keep working.

“Your team requires single sign-on”

Choose Sign in with SSO with the organization name shown (Sign in with SSO).