1. Home
  2. SMTP codes
  3. Enhanced status codes
  4. 4.7.12

X.7.12 · Security or policy

SMTP enhanced status code 4.7.12

A password transition is needed

X.7.12 means the user must make a one-time transition to the selected authentication mechanism, typically by logging in once with PLAIN. Microsoft also uses 5.7.12 for recipients that reject mail from outside their organisation.

Registry codeX.7.12
Forms in use4.7.12
Registry nameA password transition is needed
Subject7: Security or policy
Permanent or temporary4.x.x persistent transient failure: retrying later may succeed
Associated basic codes422, 432
Defined in[RFC 4954]

What the registry says

This response to the AUTH command indicates that the user needs to transition to the selected authentication mechanism. This is typically done by authenticating once using the [PLAIN] authentication mechanism. The selected mechanism SHOULD then work for authentications in subsequent sessions.

IANA SMTP Enhanced Status Codes registry, X.7.12

The basic codes it travels with

  • 432 A password transition is needed

In practice

As an authentication code, X.7.12 asks the user to log in once with PLAIN to move to a new mechanism, and it is rarely seen. Microsoft 365 reuses 550 5.7.12 for a recipient set to reject mail from outside its organisation, which is the meaning most people search for. Only the recipient's administrator can change that.

What the sender should do

For authentication, log in once as the server describes. For the Microsoft recipient restriction, only the recipient's administrator can allow outside senders.

Would verifying the list have prevented 4.7.12?

No

This reply is about your sending setup, the message or the receiving system, not about whether the address exists, so verifying the list will not prevent it.

How providers use X.7.12

Quoted from each provider’s own error reference.

Common questions

What does 4.7.12 mean?
X.7.12 means the user must make a one-time transition to the selected authentication mechanism, typically by logging in once with PLAIN. Microsoft also uses 5.7.12 for recipients that reject mail from outside their organisation.
What should I do about 4.7.12?
For authentication, log in once as the server describes. For the Microsoft recipient restriction, only the recipient's administrator can allow outside senders.
Would an email verifier have caught 4.7.12?
No. This reply is about your sending setup, the message or the receiving system, not about whether the address exists, so verifying the list will not prevent it.

Full guides for this code

Sources

Registry and provider wording is quoted exactly; guidance is written by the SimpleVerifier Team.

SimpleVerifier Team · Last checked against the sources 2026-11-05

Clean your next list before it bounces

100 free email checks when you sign in with Google, no card. Then monthly plans from $9, or one flat price with fair use, never cut off.

100 free checks, no card Cancel anytime Secure payment by Stripe