How to fix "401 - Invalid username/email and password"

You're affected by this only if you're using USER_ID and TOKEN; if you use your own account with username and password, skip this guide

TL;dr: Change app_id and app_secret with the one below, depending of your token creation Date (more in depth explanation at the bottom)

Which app_id and app_secret should you use?

For tokens created after 2025-05-06:
app_id: 798273057
app_secret: abb21364945c0583309667d13ca3d93a

For tokens created after 2024-08-12:
app_id: 579939560
app_secret: fa31fc13e7a28e7d70bb61e91aa9e178

For tokens created before 2024-08-12:
app_id: 950096963
app_secret: 979549437fcc4a3faad4867b5cd25dcb

If you don't know the creation date of a token:

• Check the token with one of these bots:
  1. https://t.me/tmx_helper_bot (/qobc command)
  2. https://t.me/account_tools_bot (/start command)

Where to insert them?

• QobuzDownloaderX-MOD:
  1. Make sure you have the lastest version 1.2.7.0
  2. Before logging in, open the settings menu by clicking the gear icon located in the top right
  3. In the settings screen, enter the app_id and app_secret compatible with your Token, press the save button and close the settings screen ( X icon top right)
  
  
• Streamrip:
  1. Open the config file with rip config open - If it doesn't work, locate it manually executing rip config path and then open it with a text editor
  2. Locate [qobuz] section and change app_id and app_secret - don't delete quotation marks nor square brackets!
  3. Make sure to set use_auth_token = true
  
  
• OrpheusDL:
  1. Locate your OrpheusDL installation directory
  2. Open settings.json inside /OrpheusDL/config/
  3. Scroll to bottom and locate "orpheusdl-qobuz": {
  4. Change app_id and app_secret - don't delete quotation marks!
  
  
• qz-dl (streetsamurai00mi fork):
  1. Execute qzdl-dev -sc (first line containts the config.ini file location)
  2. Open config.ini with any text editor
  3. Change app_id and secrets parameters
  
• qbztoken.user.js (web player with tokens):
  - You cannot changed app_id and app_secrets, so you must use tokens that work with latest app_id/app_secret combo
  
  

If you still get that error, then:

 -> Check the value you entered are correct and make sure to not delete quotation marks or brackets!

 -> The Token is expired, check it with one of the following bot:
1. https://t.me/account_tools_bot
2. https://t.me/tmx_helper_bot

 -> Your IP might have been blocked by Qobuz, try rebooting modem/router or a VPN. Nothing more can be done about that.

Technical explanation:

Update 2025-05-06: webplayer updated to v. 8.0.0-b009

Qobuz updated their web player to version 7.2.0-b082e, bringing a new app_id parameter and they also changed how the Token generation works.
From now onwards, Tokens will be bound to their respective app_id used for generating them.

Example: a Token generated with old app_id will only work with old app_secret

Also Tokens aren't "retrocompatible", meaning that a Token generated with new app_id will not work with old app_id and old app_secret