# Invalid user token when attempting to login
**URL:**
**Author:**  [@onekq](/static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Fu%2Fonekq)%5C
**Post date:** [March 12, 2025, 12:30am UTC](/static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Ft%2Finvalid-user-token-when-attempting-to-login%2F145299%2F1 "2025-03-12T00:30:15Z")
I tried huggingface\_hub.login and got Invalid user token exception. But I went to the tokens setting to find it normal. This is a write token. It was last refreshed in October.
What went wrong here?
---
**Author:**  [@John6666](/static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Fu%2FJohn6666)%5C
**Post date:** [March 12, 2025, 9:26am UTC](/static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Ft%2Finvalid-user-token-when-attempting-to-login%2F145299%2F2 "2025-03-12T09:26:03Z")
You can create as many tokens as you like, so why not try making some new ones?
> **[Hugging Face – The AI community building the future.](https://huggingface.co/login?next=%2Fsettings%2Ftokens)**
>
> We’re on a journey to advance and democratize artificial intelligence through open source and open science.
Also, today is a day when the token specifications change a lot, so they may work or they may not.😅
[website@huggingface.co](mailto:website@huggingface.co)
---
**Author:**  [@onekq](/static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Fu%2Fonekq)%5C
**Post date:** [March 13, 2025, 5:28pm UTC](/static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Ft%2Finvalid-user-token-when-attempting-to-login%2F145299%2F3 "2025-03-13T17:28:34Z")
Thanks John. Refreshing works. But there has been no warning of any sort so it’s quite confusing. You can imagine how many workflows were disrupted
---
**Author:**  [@John6666](/static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Fu%2FJohn6666)%5C
**Post date:** [March 13, 2025, 5:49pm UTC](/static-proxy?url=https%3A%2F%2Fdiscuss.huggingface.co%2Ft%2Finvalid-user-token-when-attempting-to-login%2F145299%2F4 "2025-03-13T17:49:27Z")
I really wish there were fewer problems with account and token authentication… I run into them from time to time too.
Tokens are a good system because they’re safer than passwords if they get leaked, but I often wish there were more specific announcements and FAQs about their operation.
Something like “If you have a problem like this, do this!” or “There will be construction work on token authentication this week, so please be careful as there may be problems!” would be good…😓