“Something went wrong. Please try again.” Appears when Login HCP Terraform UI on the First Attempt

Introduction

HCP Terraform users may run into an issue when logging into their user accounts through web browsers with the error message “Something went wrong. Please try again.” on the first attempt. 

They will be able to log in on the second attempt.

Cause

The cause of this issue is that the reCAPTCHA score (0.1 or 0.3) is lower than 0.5 (HCP Terraform's minimum allowed reCAPTCHA score).

Here are the possible reasons why users get low scores on the first login attempt:

1. Limited Behavioral History: reCAPTCHA v3's strength lies in analyzing subtle user interactions across your site. For a first-time login, there’s no prior interaction history for reCAPTCHA to evaluate, making it harder to distinguish a legitimate human from an automated script.
2. IP/Network Factors:
   • VPNs or Proxies: Users might be using a VPN or proxy, which can make their traffic appear suspicious, especially if the IP address has been associated with malicious activity in the past.
   • Shared Networks: Public Wi-Fi, corporate networks, or university networks can have many users originating from the same IP, and if one user’s activity is suspicious, it can affect the score for others on that network.
   • Data Center IPs: Some users might inadvertently come from IP ranges that are commonly used by bots or data centers.
3. Unusual User Behavior (even for humans): Very fast form filling, lack of mouse movements, or direct navigation to the login page without prior browsing can sometimes be flagged as non-human behavior by reCAPTCHA.
4. Browser/Device: Outdated browser, malicious extensions, corrupted profile, or using the same device/browser for multiple accounts.

Overview of possible solutions (if applicable)

Solutions:

• Ensure "Human-like" Interaction: reCAPTCHA monitors how you navigate the page. When interacting with the login form, make your actions look natural:

  • Don't rush through the form fields.

  • Move your mouse around the page before clicking the login button (even if just slightly).

  • Click directly on the text boxes and the final login/submit button, rather than using shortcuts or tabbing aggressively.

  • Avoid pasting credentials if possible; type them manually.

• Use a Trusted and Updated Browser:

  • Make sure your web browser (Chrome, Firefox, Edge, etc.) is fully updated to the latest version.

  • Ensure JavaScript is enabled, as reCAPTCHA relies on it to monitor your activity.

  • Try disabling browser extensions (especially ad-blockers, privacy tools, or VPNs) temporarily for that specific website, as they can sometimes interfere with reCAPTCHA's ability to assess your score.

• Be Logged into a Google Account:

  • If you are logged into a Google account in the same browser, your score is generally significantly higher (often near 0.9). This is because Google can leverage your account's reputation to verify you are a human.

• Maintain a Good Web History:

  • Avoid frequently clearing your cookies and browser history, as reCAPTCHA may use these to build a profile of legitimate user behavior. Using Incognito or Private browsing modes often results in lower scores.

• Avoid Datacenter IPs, Shared Networks, and VPNs or Proxies:

  • Some IPs from these sources might have been used by bots or have been associated with malicious activity in the past. Avoid logging from these sources if you keep getting low reCAPTCHA scores.

Additional Information

• A useful tool for detecting the reCAPTCHA scores from the source