Verify File Sharing Configuration
Before troubleshooting network connectivity or passwords, you must ensure that the Mac Mini is correctly configured to share files via the Server Message Block (SMB) protocol. Incorrect settings here will prevent any client from connecting, regardless of whether the credentials are valid. Open System Settings on the Mac Mini and navigate to General followed by Sharing. Locate the File Sharing toggle and ensure it is switched on. If it was already on, toggle it off and then back on to reset the service state. Within the File Sharing preferences pane, click the i icon next to the toggle to access advanced options. Under the SMB section, verify that the checkbox for Share files and folders using SMB is checked. Crucially, you must also check the box labeled Share users and groups on this computer using SMB. This option enables the Mac to authenticate against its local user database rather than relying on guest access, which is often restricted or disabled by default in modern macOS versions. Below this section, you will see a list of user accounts. Ensure that the specific user account you intend to use for login has a checkmark next to it. Without this explicit permission, the user cannot authenticate even with the correct password.Check Network Discovery and Firewall Settings
Even with correct sharing settings, firewall rules or disabled network discovery can block SMB traffic. The SMB protocol relies on specific ports, primarily port 445, to establish connections. Open System Settings, go to Network, and select your active interface, such as Wi-Fi or Ethernet. Click on Details or Options depending on your macOS version, and look for firewall settings. If the built-in macOS firewall is enabled, ensure that Automatically allow signed software to receive incoming connections is checked. For more granular control, you may need to manually allow incoming connections for File Sharing. Additionally, verify that Local Network permissions are granted to Finder and System Preferences. Go to System Settings > Privacy & Security > Local Network. Ensure that Finder and System Events have toggles enabled. If these are disabled, the Mac Mini might not broadcast its presence to other devices on the network, making it appear "offline" to clients. You can also test connectivity directly by pinging the Mac Mini’s IP address from another device on the same subnet to rule out basic network isolation issues.Resolve Client-Side Credential Caching
A frequent cause of "wrong credentials" errors is stale authentication data stored on the client machine. When you change a password on the Mac Mini or modify user permissions, the client device (such as a Windows PC or another Mac) may continue trying to use old cached credentials. On a Windows client, open the Control Panel, go to User Accounts, and select Manage Your Credentials. Under Windows Credentials, look for entries related to the Mac Mini’s IP address or hostname. Delete these entries to force the system to prompt for fresh login details next time you connect. For macOS clients, the issue often lies in the Keychain Access utility. Open Keychain Access and search for the name or IP address of the Mac Mini. If you find any entries related to SMB or AFP sharing, delete them. Then, attempt to reconnect via Finder under the Network tab. You should be prompted to enter the username and password again. Enter the exact username associated with the shared folder on the Mac Mini. Note that the username must match the full short name of the account, not the full display name. For example, if the account is named "John Doe," the username is likely "jdoe."Ensure Protocol Compatibility
Sometimes, the error stems from a mismatch in SMB protocol versions between the server and the client. Older clients may struggle with newer security defaults, while very new clients might reject older insecure protocols. In the SMB settings on the Mac Mini, there is often an option to specify the minimum SMB protocol version. It is generally recommended to set this to SMB2 or higher for better security and compatibility with modern operating systems. If you are connecting from a legacy device, you might need to temporarily allow SMB1, though this is discouraged due to security vulnerabilities like WannaCry exploits. If you suspect a deeper configuration issue, consider reviewing how Samba shares function for backups, as similar authentication principles apply. Understanding the underlying mechanics of file sharing can help diagnose persistent glitches. See Using Samba Share for Mac OS Time Machine Backups and File Sharing with Finder for insights into robust sharing configurations.Test with a New User Account
If all previous steps fail, create a new temporary user account on the Mac Mini specifically for testing. Create a standard user with a simple password and grant it full read/write access to a shared folder. Try connecting to the SMB share using this new account from the client device. If this works, the problem is isolated to the original user’s account permissions, password hash corruption, or group membership. If it still fails, the issue is likely systemic, involving the SMB service itself or network infrastructure. In cases where you are dealing with cross-platform compatibility, such as connecting a Mac to a Windows share, similar credential caching issues arise. Reviewing MacOS Computer Cannot Connect to Windows SMB Share can provide additional context on handling mixed-OS environments.Frequently Asked Questions
Why does my Mac Mini show as offline in Finder?
This usually indicates that Local Network permissions are disabled for Finder or that Bonjour discovery is blocked by a firewall. Check System Settings > Privacy & Security > Local Network to ensure Finder has access.
How do I reset SMB credentials on a Windows PC?
Open Control Panel > User Accounts > Manage Your Credentials > Windows Credentials. Remove any entries listing the Mac Mini's IP address or hostname, then restart the explorer process or reboot.
Can I use a display name instead of a short name for login?
No, SMB authentication requires the Unix short name of the user account. Display names containing spaces or special characters will always result in "wrong credentials" errors.
What is the safest SMB protocol version to use?
SMB2 or SMB3 is recommended for security and performance. SMB1 is deprecated and vulnerable to ransomware attacks, so it should only be used for extremely legacy devices if absolutely necessary.
Why does changing a password break SMB access?
Client devices cache old credentials. After changing a password on the server, you must clear the cached credentials on the client machine to force a new authentication handshake.