How do I fix "Invalid Credentials" errors for Web Push (Chrome/Firefox) notifications?

The "Invalid Credentials" error for Web Push platforms (Chrome, Firefox and other browsers) means the VAPID key pair stored in your Pushwoosh web push configuration is not the pair the browser used when the visitor subscribed.

Pushwoosh web push authenticates with VAPID keys only — there is no Sender ID or Firebase Project number to match.

To resolve this:

1. Open your web push configuration: go to Settings → Configure platforms and click Configure under All browsers configuration.

2. Check which option is in use:

   • Create a new push configuration — Pushwoosh generates a fresh VAPID key pair for you. Existing subscribers created with a different key pair will have to subscribe again.
   • Use existing configuration — choose this if your subscribers were collected with your own VAPID keys (for example generated in Firebase under Project settings → Cloud Messaging → Web configuration → Web Push certificates). Paste the exact public and private key of that pair.

3. Confirm the keys belong to the same pair and the same site that collected the subscribers. A partially copied private key, a trailing space, or keys taken from a different project all produce "Invalid Credentials".

4. Re-test with a freshly subscribed browser. Tokens issued under the old key pair stay invalid and are eventually cleaned up.

If the error persists after the key pair has been verified, contact support with your application code and one affected push token.