WWW-Authenticate Header Explained

What the HTTP WWW-Authenticate header does and when it's used.

Published October 16, 2026

The WWW-Authenticate header tells the client how to authenticate, sent alongside a 401 Unauthorized response.

Key points

  • Specifies the authentication scheme expected, like Basic or Bearer
More HTTP articles