Nexus Entrance / Board index /Stopped at the door
Nexus addresses three doors, one platform behind them

Your account, balance and orders are the same through all three. Copy rather than retype, and check the signature once you are through.

Door A nexusb2l73qzjn4slhyfxa3jvpolw7fomiz5sgyyefnsdhikaqgborqd.onion
Door B nexusma2iegzo7atzwbrwxhcdopyri3vare2twibldnlc3txqjdeb5yd.onion
Door C nexusabcd6xxpjuftr7i3uohealsg64xtgwrmznkfh3o3rkcf3raxead.onion

An address that opens is not an address that is genuine. The check that settles it takes under a minute.

Login refused

One possible cause changes what you should do first, so this page is in a specific order.

Do this before retryingVerify the signature before you type the password again. A login page that rejects correct credentials is what a clone looks like after it has already collected them, and each retry hands them over once more.

Then the boring causes, in order

  1. The username, character by character. People change a character or the case and then spend an hour debugging the password field.
  2. Your clock. Time based codes fail when the machine has drifted, which happens on systems that were off a while or run isolated. This is a large share of reports that read as rejection.
  3. Circuit quality. A slow circuit can push you past the window for a time based code, which reads as a wrong code rather than a timeout.
  4. Rate limiting. Several fast attempts trigger it, and it looks identical to refusal. Wait an hour rather than trying harder.
  5. A different door. Sessions are shared across all three, so failing at one and working at another points at that address.

If verification failed at the top

Treat the credentials as gone and work in this order, because it puts the thing an attacker can act through first rather than the thing you are most worried about.

  1. Get in through an address you verified yourself, not the one you were just using.
  2. Change the password to something used nowhere else.
  3. Reset two factor and save the new recovery material before closing the page.
  4. Read the message log. A stolen account is most valuable as a way to speak to people who trust it.
  5. Check open orders and any saved addresses for changes you did not make.
  6. Deal with the balance last. It is the obvious worry and the least urgent item.

The full version of this is on the locked out path, which covers what to do when none of it works.

What will not help

AttemptResult
Trying many passwords quicklyRate limiting, which makes the next hour worse
Looking for support outside the platformIt does not exist, and everything claiming to be it targets people in your position
Asking on a forum with detailsAdvertises an account worth attacking and invites private messages from strangers
Using an address somebody offers youThe standard follow up to a login problem, and the timing is deliberate