Skip to content
← All Status Codes
401
Client Error

401 Unauthorized

Authentication is required and has failed or not been provided.

Definition (RFC 9110)

HTTP status code 401 401 Unauthorized is defined in RFC 9110 (HTTP Semantics), Section 15.5.2 — the current authoritative specification for HTTP semantics, published June 2022, which obsoletes the older RFC 7231 and RFC 2616.

Description

The 401 Unauthorized status code indicates that the request has not been applied because it lacks valid authentication credentials. The response must include a WWW-Authenticate header indicating the authentication scheme.

Common Causes

  • Missing or expired authentication token
  • Invalid API key
  • Session expired
  • Incorrect username or password

How to Fix

  • Include valid credentials in the request
  • Refresh expired tokens
  • Check API key validity
  • Re-authenticate if session expired

Check your website's HTTP status code

Check now →

Related Status Codes

Automate this check

Set up continuous monitoring and get an alert when something breaks. No manual runs to remember.