X.7.12 · Security or policy
SMTP enhanced status code 4.7.12
A password transition is needed
X.7.12 means the user must make a one-time transition to the selected authentication mechanism, typically by logging in once with PLAIN. Microsoft also uses 5.7.12 for recipients that reject mail from outside their organisation.
| Registry code | X.7.12 |
|---|---|
| Forms in use | 4.7.12 |
| Registry name | A password transition is needed |
| Subject | 7: Security or policy |
| Permanent or temporary | 4.x.x persistent transient failure: retrying later may succeed |
| Associated basic codes | 422, 432 |
| Defined in | [RFC 4954] |
What the registry says
This response to the AUTH command indicates that the user needs to transition to the selected authentication mechanism. This is typically done by authenticating once using the [PLAIN] authentication mechanism. The selected mechanism SHOULD then work for authentications in subsequent sessions.
IANA SMTP Enhanced Status Codes registry, X.7.12
The basic codes it travels with
- 432 A password transition is needed
In practice
As an authentication code, X.7.12 asks the user to log in once with PLAIN to move to a new mechanism, and it is rarely seen. Microsoft 365 reuses 550 5.7.12 for a recipient set to reject mail from outside its organisation, which is the meaning most people search for. Only the recipient's administrator can change that.
What the sender should do
For authentication, log in once as the server describes. For the Microsoft recipient restriction, only the recipient's administrator can allow outside senders.
Would verifying the list have prevented 4.7.12?
No
This reply is about your sending setup, the message or the receiving system, not about whether the address exists, so verifying the list will not prevent it.
How providers use X.7.12
Quoted from each provider’s own error reference.
- Microsoft 365 5.7.12
Sender was not authenticated by organization
Common questions
- What does 4.7.12 mean?
- X.7.12 means the user must make a one-time transition to the selected authentication mechanism, typically by logging in once with PLAIN. Microsoft also uses 5.7.12 for recipients that reject mail from outside their organisation.
- What should I do about 4.7.12?
- For authentication, log in once as the server describes. For the Microsoft recipient restriction, only the recipient's administrator can allow outside senders.
- Would an email verifier have caught 4.7.12?
- No. This reply is about your sending setup, the message or the receiving system, not about whether the address exists, so verifying the list will not prevent it.
Full guides for this code
Sources
- IANA: SMTP Enhanced Status Codes registry (checked 2026-11-05)
- RFC 3463: Enhanced Mail System Status Codes (checked 2026-11-05)
- RFC 4954: SMTP Service Extension for Authentication (checked 2026-11-05)
- Microsoft Learn: Email non-delivery reports and SMTP errors in Exchange Online (checked 2026-11-05)
Registry and provider wording is quoted exactly; guidance is written by the SimpleVerifier Team.
SimpleVerifier Team · Last checked against the sources 2026-11-05