Skip to content
Gmail and Google Workspace · permanent error

504 5.7.4: unrecognized authentication type

Your client asked Gmail to sign in with an authentication mechanism that Gmail does not offer, so the sign-in was refused.

Gmail
Provider
Permanent (5xx)
Class
Sources checked
Author

At a glance

Code
504 5.7.4
Temporary or permanent
PermanentRefused for good: the message comes back to the sender, and resending it gets the same answer.
Who has to act
The sender. The fix is on the sending side: your domain, your server or your list.
What the server says
504 5.7.4 Unrecognized authentication type.

What it means

When a client sends AUTH it names a mechanism, such as PLAIN, LOGIN or XOAUTH2. Gmail refuses a mechanism it does not support with this reply. The mechanisms it accepts appear on the AUTH line of its EHLO response, which on port 587 comes only after STARTTLS; an AUTH sent before STARTTLS gets 530 5.7.0 instead. A client set to an unsupported mechanism such as CRAM-MD5 is the usual case. Google's current table prints this code as 5.7.40; the June 2025 version read 5.7.4, which Gmail's servers still send and this entry uses.

Common causes

  • A client set to a mechanism Gmail does not support, such as CRAM-MD5.
  • Old software with a fixed list of mechanisms.
  • A mistyped mechanism name in a manual or scripted SMTP test.

How to fix it

  1. 01Set the client to use PLAIN or LOGIN over TLS, or OAuth 2.0 (XOAUTH2) if it supports it.
  2. 02Check the AUTH line in Gmail's EHLO reply, after STARTTLS, to see which mechanisms it offers.
  3. 03Update old software whose list of mechanisms does not include one that Gmail accepts.

Sources

What this page rests on, checked on 20 Oct 2026. The explanation is ours; the reply text is the server's.

  1. 504 5.7.4XOAUTH no longer supported.Your client tried to sign in with XOAUTH, Google's old OAuth 1.0 mechanism, which Gmail has retired in favor of XOAUTH2.GmailPermanent
  2. 504Command parameter not implemented.The server implements the command, but not the particular parameter or option the client asked for with it.StandardPermanent
  3. 5.7.4Security feature not supported.The message or session asked for a security feature, such as a form of secure authentication, that the delivery protocol here cannot support.StandardPermanent

All 108 Gmail codesEvery code in the wikiPaste your own bounce

Beat · paid monitoring

A heartbeat for your email.

Beat runs every check on this site on a schedule: 41 checks, 33 blacklists and real inbox placement. The moment something breaks, it tells you what broke, why it matters, and the exact fix.

example.comWatching
  • SPFpass
  • DKIMpass
  • DMARCp=none
  • Blacklists0 of 33

Illustrative. Your domain, every few hours.

Also from us:Pulse: your own sending infrastructureConsulting: $65/hr, no retainer