The 401 Unauthorized status tells the browser that the request lacks valid authentication. WordPress returns this code when login credentials, tokens, or server rules reject the request.
Typical triggers include wrong passwords, expired API tokens, .htaccess restrictions, file permission problems, or firewall blocks. When the server fails to verify the user, it stops access to admin pages, REST endpoints, and protected content.