Skip to content
Gmail and Google Workspace · permanent error

554 5.7.0: too many unauthenticated commands

Gmail closed the session because your client sent too many commands without signing in, on a service that needs authentication.

Gmail
Provider
Permanent (5xx)
Class
Sources checked
Author

At a glance

Code
554 5.7.0
Temporary or permanent
PermanentRefused for good: the message comes back to the sender, and resending it gets the same answer.
Who has to act
The sender. The fix is on the sending side: your domain, your server or your list.
What the server says
554 5.7.0 Too many unauthenticated commands.

What it means

On the servers where Gmail expects a client to sign in before sending, a client that keeps sending commands without authenticating is eventually cut off with this reply. It usually comes from a mail client or device that is set up for smtp.gmail.com without SMTP authentication, or one that issues MAIL FROM and other commands before AUTH. The fix is to configure SMTP authentication with valid credentials over an encrypted connection.

Common causes

  • A client set up for smtp.gmail.com without SMTP authentication.
  • A client that issues commands such as MAIL FROM before AUTH.
  • A client looping on failed commands without signing in.

How to fix it

  1. 01Turn on SMTP authentication in the client and enter valid credentials.
  2. 02Connect over TLS, on port 587 with STARTTLS or on port 465, before signing in.
  3. 03Check the session log for the commands sent before AUTH, and fix their order.

Sources

What this page rests on, checked on 20 Oct 2026. The explanation is ours; the reply text is the server's.

  1. 530 5.7.0Authentication required.Your client tried to send through a Google SMTP server that needs a signed-in account, without signing in first.GmailPermanent
  2. 554Transaction failed.The server permanently refused the transaction, often after receiving the message data or straight away when the connection opened.StandardPermanent
  3. 5.7.0Security or policy refusal, unspecified.The message or session was refused for a security or policy reason that the server did not describe more precisely, or chose not to reveal.StandardPermanent

5.7.0 at other providers

  1. 550 5.7.0Message classified as spam or virus.The Telekom spam filter classified your message as spam or as carrying a virus and rejected it after the DATA phase. False positives can be reported.TelekomPermanent

All 108 Gmail codesEvery code in the wikiPaste your own bounce

Beat · paid monitoring

A heartbeat for your email.

Beat runs every check on this site on a schedule: 41 checks, 33 blacklists and real inbox placement. The moment something breaks, it tells you what broke, why it matters, and the exact fix.

example.comWatching
  • SPFpass
  • DKIMpass
  • DMARCp=none
  • Blacklists0 of 33

Illustrative. Your domain, every few hours.

Also from us:Pulse: your own sending infrastructureConsulting: $65/hr, no retainer