First, if you allow your browser to fill username and password for web sites, delete its data for Duplicati, typically at address localhost:8200 but yours may vary. If you don’t do this, it will also break your restore.
Password saver may autofill too many places, getting --auth-password is not supported #4102
A couple of ways to remove the extraneous information from your destination are shown on page below.