401Unauthorized
The request has no valid credentials, so the server will not process it until you authenticate.
Browse all HTTP status codesWhen you see it
A missing, expired or malformed token or session. The name is a historical misnomer: 401 is about authentication, meaning who you are, not authorization, meaning what you are allowed to do.
A correct 401 includes a WWW-Authenticate header saying how to authenticate. In a browser, that header is what triggers the built-in username and password box.
What to do about it
Logging in again is the usual fix, because the common cause is an expired session. For an API, check the token has not expired, is being sent on the right header, and carries the scheme the server expects, such as Bearer.
Often confused with
Look up another one
Open
Type a code, a partial code like 40, or any word from a name or description. Everything runs in your browser.
69 of 69 codes. Click a row to copy it.