We upgrade Magento to Now it worked for a while. When we cleared the cached. We can't log in to the backend anymore. It keeps saying

"Invalid Form Key. Please refresh the page."

Our staging site is working fine.

I followed some instructions like increase in_var_input, check cookies and others but didn't work out.

  • Have u looked at ur log files? Disable third party apps. Do u still get the same error? That usually means ur session has timed out. So looking for some more info Commented Mar 12, 2016 at 20:16
  • Have you tried from multiple computers / using private browsing sessions? Changes to cookie setting can be tricky, and you haven't told us what you've done by "check cookies". Commented Mar 13, 2016 at 1:04
  • @AnthonyCicchelli i tried but no luck. Commented Mar 13, 2016 at 16:49
  • @LukeRodgers all team tried but we got the same issue. Commented Mar 13, 2016 at 16:49
  • I'll see what testing I can come up with tonight. In the meantime run your indexes and clear any cache u can come up with shell..this includes dB sessions..something on ur live server is thinking ur logged in and everything needs to be cleared. Commented Mar 13, 2016 at 22:21

2 Answers 2


enter image description here

The record #1733 was set to www.example.com by someone. That caused the issue.


Add below line

<input name="form_key" type="hidden" value="<?php echo $this->getFormKey() ?>" />

above the line in app/design/adminhtml/default/default/template/login.html

<h2><?php echo Mage::helper('adminhtml')->__('Log in to Admin Panel') ?></h2>

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.