Skip to content
Networking·Intermediate·Conceptual·1 min read

What's the difference between a 401 and a 403 response?

Short interview answer

401 means the request lacks valid authentication — the server doesn't know who you are. 403 means the server does know who you are but has determined you're not authorized to perform that specific action on that resource.

Key takeaway

Explain the underlying mental model clearly, then support it with a concrete example and its trade-offs.

← Back to HTTP methods, status codes, and idempotency

Related questions