Unable to verify Secret Hash For Client AWS Error

# Unable to verify Secret Hash For Client AWS Error

The "Unable to verify Secret Hash for Client" error occurs in Cognito and Amplify requests when the App client of a User pool is configured with an App client Secret, but the secret is not provided when making API requests.

When using Cognito or Amplify on the client side (in a browser), the client hash can't be secured and the library does not support App clients with a secret.

To solve the "Unable to verify Secret Hash for Client" error, create a new App client for your Cognito user pool and uncheck the Generate client secret checkbox.

uncheck generate client secret

Unfortunately, once the App client is created, you can't disable the App client secret. This means you have to create a new App client without a secret and delete the old one.

To create a new App client without generating a client secret:.

Open the Cognito AWS Cognito console, click on Manage User Pools and select your user pool
In the sidebar click on App clients and verify if your App client secret field is populated

app client secret

Scroll to the bottom of the page and click on Add another app client. Copy the configuration of your first App client, however, uncheck the Generate client secret checkbox
Once the App client without the secret is created you can delete your old app client. Only the app client without the secret should remain.

app client without secret

Once your app client is configured to not require a secret hash you will be able to sign users up without getting the error.

# Additional Resources

You can learn more about the related topics by checking out the following tutorials:

I wrote a book in which I share everything I know about how to become a better, more efficient programmer.

You can use the search field on my Home Page to filter through all of my articles.

Unable to verify Secret Hash For Client AWS Error

# Unable to verify Secret Hash For Client AWS Error

# Additional Resources

Borislav Hadzhiev