SMTP 252 Cannot Verify User vs 535 Authentication Failed
SMTP 252 (Cannot Verify User) is a 2xx Positive Completion response, while 535 (Authentication Failed) is a 5xx Permanent Negative response. 252 indicates that the server cannot verify the user but will accept the message and attempt delivery. This is often returned in response to VRFY when the server intentionally hides user information. In contrast, 535 means that the authentication credentials provided are invalid. The username, password, or authentication mechanism was rejected by the server.
Description
The server cannot verify the user but will accept the message and attempt delivery. This is often returned in response to VRFY when the server intentionally hides user information.
When You See It
When using the VRFY command to check if a recipient exists. The server refuses to confirm or deny the address, typically as a spam-prevention measure.
How to Fix
No fix needed — the server will still attempt delivery. If you need to verify addresses, contact the mail administrator or rely on bounce-back messages instead.
Description
The authentication credentials provided are invalid. The username, password, or authentication mechanism was rejected by the server.
When You See It
After submitting incorrect credentials via the AUTH command. The username or password does not match any account on the server.
How to Fix
Double-check your username and password. If using an app password (e.g., Gmail, Outlook), ensure it is current and has not been revoked. Also verify the correct SASL mechanism (PLAIN, LOGIN, etc.).
Key Differences
252 is a 2xx Positive Completion response, while 535 is a 5xx Permanent Negative response.
SMTP 252: The server cannot verify the user but will accept the message and attempt delivery. This is often returned in response to VRFY when the server intentionally hides user information.
SMTP 535: The authentication credentials provided are invalid. The username, password, or authentication mechanism was rejected by the server.
You encounter 252 when when using the VRFY command to check if a recipient exists. The server refuses to confirm or deny the address, typically as a spam-prevention measure.
You encounter 535 when after submitting incorrect credentials via the AUTH command. The username or password does not match any account on the server.
When to Use Which
For 252 (Cannot Verify User): No fix needed — the server will still attempt delivery. If you need to verify addresses, contact the mail administrator or rely on bounce-back messages instead. For 535 (Authentication Failed): Double-check your username and password. If using an app password (e.g., Gmail, Outlook), ensure it is current and has not been revoked. Also verify the correct SASL mechanism (PLAIN, LOGIN, etc.).