Troubleshooting¶
Messages are quoted exactly as roamd shows them. Search this page (Ctrl+F / Cmd+F) for the words you see.
In the browser¶
"Wrong email or master password." : Check both for typos (the password is case-sensitive). If you've forgotten it, use Forgot password with your recovery key.
"Too many tries. Wait a minute and try again." : To stop password guessing, roamd only allows a few tries a minute. Wait a minute.
"That email already has an account. Log in instead." : Choose Log in instead of Create account.
"That recovery key has a typo. Check each group of four." : The key has a built-in check that catches most typos. Capitals, spaces and dashes don't matter; the letters and digits do.
"Wrong email or recovery key." : The key is typed correctly but belongs to a different account, or the email is wrong.
The Connect button is greyed out / the computer says "offline"
: roamd isn't running on that computer. Run roamd run there, or set it to start by itself
with roamd service install.
"Warning: … is not presenting the identity you approved…"
: Your browser noticed that the computer you're connecting to isn't the one you approved.
Don't continue. If you reinstalled roamd there yourself, remove the computer in
My devices and run roamd login on it again. Otherwise, someone may be trying to
impersonate it.
"Login failed: … rejected the username, password or key."
: The computer doesn't accept this browser. Maybe the browser key was revoked with
roamd keys revoke. Run roamd login on the computer to approve it again.
"The code … is unknown or has expired. Run roamd login again for a new one."
: Approval links last 15 minutes. Run roamd login again.
Voice is on but I only see the messages, I don't hear them : Your browser has no voice that runs on the device, and roamd won't use online voices (they would send your terminal's text away). You'll see "This browser has no voice that runs on this device, so messages are shown here instead." Try another browser, or add a voice in your system's speech settings.
"Voice typing isn't available in this browser: …" : This browser can't understand speech on the device, so the Speak button goes away. Use your keyboard's microphone in the command box instead.
The page asked for my password again : That's the automatic lock: after closing the tab, or 15 minutes without use.
On the computer¶
"this machine isn't registered yet; run roamd login first"
: Run roamd login and approve it in your browser.
"this machine was removed from its account; run roamd login to add it again"
: The computer was removed (in My devices or with roamd logout). Run roamd login to
add it back.
"refusing to run as root/Administrator: …" : roamd gives every approved browser full control of the account it runs as, so it refuses to run as the all-powerful admin account. Run it as your normal user.
"other users can read or change …. Fix with: chmod 600 '…'"
: Another user on the computer could read roamd's secret files. Run the chmod command
shown, exactly as printed.
"… was sealed on another machine or user (or has been changed), so it can't be used here."
: roamd's settings were copied from another computer or user. Sealed settings only work
where they were created. Run roamd login to set this computer up afresh.
"the code expired before anyone approved it"
: Approve within 15 minutes of running roamd login. Run it again.
"pairing code not confirmed; nothing was trusted"
: You typed n (or anything but y). Nothing changed. Run roamd login again and
compare the codes carefully.
Mac: "cannot be opened because the developer cannot be verified" : Install with the Terminal command from Installation rather than downloading in the browser.
Browser¶
| Message | Cause | Fix |
|---|---|---|
Wrong email or master password. |
Login refused (wrong password and unknown email look the same, by design) | Retry, or recover with the recovery key |
Too many tries. Wait a minute and try again. |
Guessing limit reached (per visitor and per email) | Wait a minute |
That email already has an account. Log in instead. |
Sign-up for an existing email | Log in |
That recovery key has a typo. Check each group of four. |
The key's built-in checksum failed; 0/1 are read as O/I |
Re-type |
Wrong email or recovery key. |
Recovery refused | Check email and key |
| Connect disabled / "offline" | The agent isn't connected to the hub | roamd run, or roamd service install |
…is not presenting the identity you approved… |
The machine's host key doesn't match the pinned identity | Treat as hostile unless you reinstalled; then remove and re-enrol |
Login failed: … rejected the username, password or key. |
The agent refused the browser key (not on its approved list) | roamd login on the machine |
The code … is unknown or has expired… |
Approval code expired, already used, or mistyped | New roamd login |
This browser has no voice that runs on this device, so messages are shown here instead. |
No local speech voice; online voices are never used | Install a system voice, or use another browser |
Voice typing isn't available in this browser: … |
On-device speech recognition unsupported, unavailable for the language, or its setup failed | Use the keyboard's dictation in the command box |
Voice typing stopped: … |
The recogniser reported an error (e.g. microphone permission denied) | Allow the microphone for this site |
Could not save the voice setting: … |
The vault item couldn't be saved | Check the connection and retry |
Agent (roamd)¶
| Message | Cause | Fix |
|---|---|---|
this machine isn't registered yet; run `roamd login` first |
No enrolment in the settings folder | roamd login (check --config) |
this machine was removed from its account; run `roamd login` to add it again |
The hub rejected the device token | Re-enrol |
refusing to run as root/Administrator: … |
Running as root or elevated | Run as a normal user, or --allow-root deliberately |
other users can change DIR. Fix with: chmod 700 'DIR' |
Settings folder writable by others | chmod 700 |
other users can read or change FILE. Fix with: chmod 600 'FILE' |
A secret file readable by others | chmod 600 |
FILE is a link; roamd only uses its own files… |
A symlink in place of a settings file | Replace with a regular file |
FILE belongs to another user |
File owned by a different user | Fix ownership or use your own --config |
…was sealed on another machine or user (or has been changed)… |
Settings copied from elsewhere, or modified | roamd login to re-enrol |
the hub address must start with https:// (got …) |
Plain HTTP is only allowed to localhost | Use an https:// hub |
the code expired before anyone approved it |
Not approved in time | Re-run |
pairing code not confirmed; nothing was trusted |
Anything but y at the prompt |
Re-run and compare |
could not reach the hub: … |
Network, DNS, TLS or proxy failure | Check connectivity to the hub |
Service logs¶
| OS | Where roamd's own messages go |
|---|---|
| Linux | journalctl --user -u roamd.service |
| macOS | ~/Library/Logs/roamd.log |
| Windows | Not captured yet (known gap); logins are still in access.log |