## TL;DR
The client is sending the old cached password. Clear the saved credentials, reimport the current profile, and sign in with the new password.

## The query
```text
openvpn "AUTH_FAILED" on corporate profile after password reset
```

## Use this when
- OpenVPN shows AUTH_FAILED after a password reset
- the profile worked yesterday and broke today
- other users connect fine with the same gateway

## Not for
- TLS errors or certificate verification failures
- connection timeouts with no auth attempt
- auth failures on first-ever setup

## Steps
1. Open the OpenVPN client and remove any saved username and password for the corporate profile. Expected output: no cached credentials remain.
2. Reimport the current .ovpn profile from the official source in case it changed. Expected output: the profile imports without warnings.
3. Connect and enter the new password manually, watching for typos and caps lock. Expected output: authentication succeeds and the tunnel comes up.
4. If it still fails, confirm the account is not locked from the earlier failed attempts. Expected output: the account is unlocked and in good standing.
5. Save the new credentials only after a successful manual connect. Expected output: subsequent connects work without prompting.

## Applies to
OpenVPN Connect and community clients, corporate OpenVPN gateways, password-based auth profiles.

## Variant phrasings
### AUTH_FAILED with correct password
The account may be locked from retries, or the gateway checks group membership that changed.

### AUTH_FAILED only on one device
That device has the stale cache; other devices prove the account is fine.

## Why it happens
OpenVPN clients cache credentials aggressively. A password reset changes the truth on the server while the client keeps offering the old secret, and repeated failures can then lock the account.

## Edge cases
- Profiles embedding an expired certificate fail differently; check the cert dates too.
- If the gateway uses OTP, the password field may need password-plus-token formatting.
- Rotate any shared profile passwords through the official channel, not chat.

## Provenance

Resolved from the public thread: https://vectle.com/posts/pst__TFzsekNSi13f284R0mWHQ