What causes 390143 (28000)?

Password has expired and must be reset. The service account password was rotated but the connection string was not updated. Key pair authentication: the private key file path, passphrase, or key content is incorrect. The user account has been locked due to too many failed login attempts. OAuth token has expired or the OAuth integration is misconfigured

How do I fix 390143 (28000)?

Verify the password or private key in the connection string or secret store. Check if the user account is locked: SELECT * FROM SNOWFLAKE.ACCOUNT_USAGE.LOGIN_HISTORY WHERE USER_NAME = ' ' ORDER BY EVENT_TIMESTAMP DESC LIMIT 20. For key pair authentication, verify the public key is registered: DESC USER . Reset the password or re-register the public key if credentials have changed. For OAuth, check the integration configuration and ensure the token endpoint is reachable

High severityconnection

Power BI Refresh Error:
390143 (28000)

What does this error mean?

The login attempt to Snowflake failed because the credentials are invalid. This can be a password, key pair, or token authentication failure.

Common causes

1Password has expired and must be reset
2The service account password was rotated but the connection string was not updated
3Key pair authentication: the private key file path, passphrase, or key content is incorrect
4The user account has been locked due to too many failed login attempts
5OAuth token has expired or the OAuth integration is misconfigured

How to fix it

1Verify the password or private key in the connection string or secret store
2Check if the user account is locked: SELECT * FROM SNOWFLAKE.ACCOUNT_USAGE.LOGIN_HISTORY WHERE USER_NAME = '<user>' ORDER BY EVENT_TIMESTAMP DESC LIMIT 20
3For key pair authentication, verify the public key is registered: DESC USER <username>
4Reset the password or re-register the public key if credentials have changed
5For OAuth, check the integration configuration and ensure the token endpoint is reachable

Frequently asked questions

How do I check if a Snowflake user is locked?

Run: SELECT LOCKED_UNTIL_TIME FROM SNOWFLAKE.ACCOUNT_USAGE.USERS WHERE NAME = '<USER>'. A non-null LOCKED_UNTIL_TIME means the account is temporarily locked.

What is the default Snowflake password expiry policy?

By default, Snowflake passwords do not expire. Password expiry can be configured per user with ALTER USER <name> SET DAYS_TO_EXPIRY = <n>.