# Security token has expired - Dolibarr Installation

**URL:** <https://www.dolibarr.org/forum/t/security-token-has-expired-dolibarr-installation/29891>\
**Category:** Installing my Dolibarr\
**Tags:** Issue, Help\
**Created:** [January 28, 2025, 3:21pm UTC](https://www.dolibarr.org/forum/t/security-token-has-expired-dolibarr-installation/29891 "2025-01-28T15:21:21Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![rcedxb](https://www.dolibarr.org/forum/letter_avatar_proxy/v4/letter/r/ce73a5/32.png) [@rcedxb](https://www.dolibarr.org/forum/u/rcedxb)\
**Post date:** [January 28, 2025, 3:21pm UTC](https://www.dolibarr.org/forum/t/security-token-has-expired-dolibarr-installation/29891/1 "2025-01-28T15:21:21Z")

</div>

Hi,  
I have freshly installed dolibarr version 20.0.3 to my hostgator hosting plan.  
I have used Softilicious (provided by HostGator).  
Following are the details of the specification.  
Mysql Version 8.4.0  
PHP 8.2 (ea-php82)  
While logging in, Dolibarr faces the error “Security token has expired, so action has been canceled. Please try again”  
Can anyone help me with this error?

---

<div class="post-metadata">

**Author:** ![Gribaudo](https://www.dolibarr.org/forum/user_avatar/www.dolibarr.org/gribaudo/32/3096_2.png) [@Gribaudo](https://www.dolibarr.org/forum/u/Gribaudo)\
**Post date:** [January 30, 2025, 9:50am UTC](https://www.dolibarr.org/forum/t/security-token-has-expired-dolibarr-installation/29891/2 "2025-01-30T09:50:18Z")

</div>

There are many threads on this forum regarding this error, try giving them a look  
There is no single solution, maybe try disabling third-party modules.

---

<div class="post-metadata">

**Author:** ![rcedxb](https://www.dolibarr.org/forum/letter_avatar_proxy/v4/letter/r/ce73a5/32.png) [@rcedxb](https://www.dolibarr.org/forum/u/rcedxb)\
**Post date:** [February 2, 2025, 11:48am UTC](https://www.dolibarr.org/forum/t/security-token-has-expired-dolibarr-installation/29891/3 "2025-02-02T11:48:18Z")

</div>

There are other threads … I have been to all of them… can’t find the one where we don’t have access to the files that are handled only by the hosting admins.

---

<div class="post-metadata">

**Author:** ![XAXYXAX](https://www.dolibarr.org/forum/letter_avatar_proxy/v4/letter/x/8e7dd6/32.png) [@XAXYXAX](https://www.dolibarr.org/forum/u/XAXYXAX)\
**Post date:** [February 5, 2025, 11:18am UTC](https://www.dolibarr.org/forum/t/security-token-has-expired-dolibarr-installation/29891/4 "2025-02-05T11:18:05Z")

</div>

I have the same error, cant even log in to the dolibarr. Tried to change crsf checks and idk

---

<div class="post-metadata">

**Author:** ![jonbendtsen](https://www.dolibarr.org/forum/letter_avatar_proxy/v4/letter/j/977dab/32.png) [@jonbendtsen](https://www.dolibarr.org/forum/u/jonbendtsen)\
**Post date:** [February 5, 2025, 5:18pm UTC](https://www.dolibarr.org/forum/t/security-token-has-expired-dolibarr-installation/29891/5 "2025-02-05T17:18:50Z")

</div>

which version of dolibarr and php? @XAXYXAX

---

<div class="post-metadata">

**Author:** ![caos30](https://www.dolibarr.org/forum/user_avatar/www.dolibarr.org/caos30/32/6733_2.png) [@caos30](https://www.dolibarr.org/forum/u/caos30)\
**Post date:** [February 5, 2025, 7:14pm UTC](https://www.dolibarr.org/forum/t/security-token-has-expired-dolibarr-installation/29891/6 "2025-02-05T19:14:03Z")

</div>

## Understanding Dolibarr’s Security Token System

The security token feature was implemented in Dolibarr a few years ago as a protection mechanism against automated bot attacks, particularly those attempting brute force submissions on web forms.

### Current Limitation

When working with multiple browser tabs in Dolibarr, you may encounter a “security token” error message when trying to submit forms from different tabs simultaneously. This occurs because:

1. Each click within Dolibarr generates a unique security token
2. Only the most recently generated token is considered valid
3. Forms opened in different tabs contain different tokens, but only the latest one will be accepted

### Technical Explanation

The system works as follows:

- Every internal button click or menu link generates a new unique security token
- This token must match when submitting a web form
- The validation is tied to the browser session
- You can work simultaneously using different browsers (e.g., Firefox, Chrome) without issues, as each maintains its own session

### Troubleshooting Steps

If you’re experiencing token-related issues in circumstances where you shouldn’t have the problems explained above (for example trying to login to Dolibarr), follow these steps:

1. Disable all third-party modules
2. Verify if the problem persists
3. Re-enable modules one at a time to identify the problematic one(s)

### Important Note

Third-party plugins that haven’t been updated in the past two years probably don’t handle security tokens correctly. It’s recommended to keep all modules updated to their latest versions to ensure proper functionality.

This information should help you understand and resolve any security token-related issues in your Dolibarr installation.
