400 Status Code: What It Means and How to Fix It

What does a 400 status code mean?

A 400 status code means the website received your browser's request and refused it because the request was malformed. A status code is the short number a website returns with every page, and codes in the 400 range point at the request that was sent, not at a broken server.

In plain terms: the site is running, your internet works, but something your browser sent was rejected. That something is usually the web address, a stored cookie, a security token, or the contents of a form. Because the fault sits in the request, almost every fix happens on your device.

Why does a 400 status code appear when you try to sign in?

Sign-in pages produce more 400 errors than any other kind of page, because a login request carries more with it than an ordinary page view. It sends cookies from earlier visits, a one-time security token, and the details you typed. A cookie is a small file the site saved in your browser to remember who you are.

When that saved data goes stale, the server sees a request it cannot match to anything and answers with a 400. This happens when a login page sat open for hours, when the company changed its sign-in system, or when you hold several accounts with the same company in one browser. Your password is not the problem, and retyping it will not help until the stale data is gone.

How do you fix a 400 status code, step by step?

1. Reload the page once. A single failed request is often nothing.
2. Look hard at the address bar. A stray character, a space pasted in from a chat message, or a link that got cut in half causes 400 errors more often than anything else. Search for the company by name and open its site from the result instead of pasting a link.
3. Open a private or incognito window and try again. That window ignores your saved cookies, so if the page loads there, stale cookies are the cause.
4. Clear cookies for that one site only, not for the whole browser.
5. Close the browser fully, reopen it, and start from the company's home page rather than from an old bookmark.
6. Try a different browser, or the company's own app if it has one.
7. Turn off browser extensions, particularly ad blockers, privacy tools and password managers, then try once more.

How do you clear cookies for one website only?

Clearing everything signs you out of every site you use, so start narrow. On a computer, while the failing page is open, select the small icon at the left end of the address bar. A panel opens showing that site's permissions and stored data, with an option to delete its cookies. On a phone, the same control sits in the browser's settings under site settings or privacy, where you find the site by name.

After clearing, close the tab, open the site fresh, and sign in by typing rather than through a saved shortcut.

Why does a 400 error happen on one device but not another?

A 400 error that appears on your laptop but not your phone confirms the request is at fault rather than the website. The two devices hold different cookies, different saved passwords and different extensions, so only one of them is sending the request the server dislikes.

Use that to your advantage. If the phone works, finish what you needed to do there first, then go back and clean up the laptop without pressure.

Can a VPN, a work network, or a wrong clock cause a 400 error?

Yes, all three. A VPN or a company network can add or rewrite parts of the request in ways the site refuses. A clock that is badly wrong on your device can break the security check that protects a login, because the site compares timestamps.

Turn the VPN off, switch from office Wi-Fi to a mobile connection, and set your device's date and time to update automatically. Then retry. If the error disappears, you have found the cause without touching the site at all.

Does a 400 status code mean the website is down?

Usually not. Codes in the 400 range describe a problem with the request; codes in the 500 range describe a website that failed on its own side. A site handing you a 400 error is well enough to answer you.

To be sure, open a different page on the same site. If everything else loads, the site is fine and only your request to that one page is being refused.

What if a 400 error appears while submitting a form or a payment?

Stop and check before you send it again. Repeated submissions are how one order becomes three. Go to your account activity or your email inbox and look for a confirmation.

If nothing went through, the usual causes are a file attached that was too large, an unusual character in a name or address field, or a form that sat idle so long its security token expired. Reopen the form from scratch, keep field entries plain, and complete it in one sitting.

When should you contact the company about a 400 error?

Contact them once the error survives a different browser, a different device and a different network. At that point the request is fine and their system is refusing it.

Have ready the exact wording on the screen, the time it happened, what you were doing, and which browser and device you used. Ask directly whether their sign-in system changed recently, since that is a frequent trigger. Their current help options are listed on the company’s official website.