rpk returned "Invalid credentials: SASL_AUTHENTICATION_FAILED: SASL Authentication failed."

Last updated: August 10, 2026

Problem Statement

When running the rpk command, you may encounter the following error;

Invalid credentials: SASL_AUTHENTICATION_FAILED: SASL Authentication failed

This error indicates an authentication issue when rpk attempts to access the Kafka API or Admin API in Redpanda.

Solution

There are several reasons why this error may occur. Checking Redpanda logs can provide valuable insights.

1. A missing SCRAM or an incorrect password

If Redpanda logs contain the following message;

Authentication failed: stored and client submitted credentials do not match
    • This happens when the rpk command accesses the Kafka API with either a missing SCRAM or an incorrect password. Please check that your SCRAM and password are correct.  

2. The SASL username is incorrect

If Redpanda log didn't show anything, but the rpk command returned Authentication Failed, your username didn't exist. Please check your username. 

 

3. Your username or password is incorrect when the rpk accesses the Redpanda Admin API 

If Redpanda logs contain the following messages, please check your username and/or password.

- An example of a WARN message for a wrong password

request_auth - request_auth.cc:150 - Client auth failure: user 'joe' wrong password

- An example of a WARN message for an incorrect username

request_auth - request_auth.cc:123 - Client auth failure: user 'Joeee' not found

Notes

Depending on the Redpanda version, the error messages may vary slightly. 

 

If you have any questions on this notice or need further guidance, please contact customer-success@redpanda.com / support@redpanda.com