The 535 5.7.8 SMTP error means your username or password for SMTP authentication is wrong. Learn how to fix this email sending error.
5.7.8
| Component | Value | Meaning |
|---|---|---|
| Class | 5 | Permanent failure |
| Subject | 7 | Security or policy |
| Detail | 8 | Authentication Credentials Invalid |
Per RFC 3463 Enhanced Mail System Status Codes. Class (X) = severity, Subject (Y) = category, Detail (Z) = specific condition.
The SMTP server rejected your authentication attempt because the username, password, or credentials are incorrect. This is a sending configuration error, not a bounce from the recipient.
Gmail requires an App Password for SMTP auth if 2-Step Verification is enabled. Standard passwords will return 535 5.7.8.
📖 Google Workspace / Gmail documentation →Microsoft 365 may require Modern Authentication (OAuth 2.0) for SMTP. If Basic Auth is disabled, configure your client for OAuth.
📖 Microsoft 365 / Outlook documentation →These are real bounce message formats you might receive. Paste yours into the Bounce Decoder for instant analysis.
535 5.7.8 Username and Password not accepted 535 5.7.8 Error: authentication failed: Invalid credentials
Fixing this type of bounce requires correctly configured SPF, DKIM, and DMARC records. Our free Domain Checker analyses all three in one scan and tells you exactly what to fix.
Run a Free Domain Authentication Check →Paste your full NDR email, SMTP error line, or mail log fragment to get an instant plain-English diagnosis.
Open the Bounce Decoder →