How to Fix Cannot verify server identity (iOS Mail)
Quick Answer
The "Cannot verify server identity" error in iOS Mail indicates that your device cannot establish a secure connection with your email server because the server's security certificate is invalid or untrusted. The fastest fix often involves accepting the certificate or reconfiguring your mail account settings.
What Causes This Error
- Expired or invalid SSL/TLS certificate on the mail server.
- Incorrect mail server settings (incoming or outgoing) in your iOS device's Mail app.
- Network interference or security software blocking the connection.
- Date and time settings on your iOS device are incorrect, leading to certificate validation issues.
- Changes made by your email provider to their server configurations.
- Corrupted mail account settings on the iOS device.
Step-by-Step Fixes
1Accept the Server Certificate (Temporary Fix)
- When the "Cannot verify server identity" pop-up appears, locate and tap the 'Details' or 'Continue' option.
- Review the certificate details if available. If you recognize the server and trust the source, tap 'Trust' or 'Continue' to temporarily bypass the warning.
- Attempt to access your mail again. This action may allow mail to sync, but the warning may reappear later if the underlying issue is not resolved.
2Verify and Update Mail Account Settings
- Open the 'Settings' app on your iOS device.
- Scroll down and tap 'Mail', then tap 'Accounts'.
- Select the affected email account. Tap 'Account' again to view its settings.
- Verify the 'Incoming Mail Server' and 'Outgoing Mail Server' hostnames, usernames, and passwords against your email provider's recommended settings. Pay close attention to capitalization and any specific port numbers or SSL requirements. Make any necessary corrections.
- Tap 'Done' or 'Account' (top left) to save changes and allow the device to attempt reconnection.
3Remove and Re-add the Email Account
- Open the 'Settings' app on your iOS device.
- Navigate to 'Mail' > 'Accounts'.
- Select the email account that is experiencing the "Cannot verify server identity" error.
- Tap 'Delete Account' and confirm the action.
- Restart your iOS device.
- Return to 'Settings' > 'Mail' > 'Accounts' and tap 'Add Account'.
- Select your email provider (e.g., iCloud, Google, Exchange, Other) and follow the on-screen prompts to re-enter your email address and password. Allow the device to automatically configure the settings if possible.
4Check Date and Time Settings
- Open the 'Settings' app on your iOS device.
- Tap 'General', then tap 'Date & Time'.
- Ensure that 'Set Automatically' is toggled on. This allows your device to synchronize its date and time with network time servers.
- If 'Set Automatically' is already on, toggle it off, wait a few seconds, then toggle it back on.
- Exit Settings and open the Mail app to check if the error persists.
Advanced Fixes
Reset Network Settings
- Open the 'Settings' app on your iOS device.
- Tap 'General', then scroll down and tap 'Transfer or Reset iPhone' (or iPad).
- Tap 'Reset', then select 'Reset Network Settings'.
- Enter your device passcode if prompted. This action will reset Wi-Fi networks and passwords, cellular settings, and VPN/APN settings to factory defaults. No data will be lost.
- After the device restarts, reconnect to your Wi-Fi network and attempt to access Mail.
Consult Your Email Provider or IT Administrator
- If the issue persists after attempting the above steps, contact your email service provider's support or your organization's IT department.
- Provide them with the exact error message: "Cannot verify server identity".
- Inquire about any recent changes to their mail server certificates, server hostnames, port numbers, or SSL/TLS requirements.
- Follow any specific instructions or configurations they provide for iOS Mail clients.
Frequently Asked Questions
What does 'Cannot verify server identity' mean?
This error means your iOS device cannot confirm the authenticity or trustworthiness of your email server's security certificate. This certificate is essential for encrypting communication between your device and the server, ensuring your emails are secure. The device is warning you that the certificate presented by the server is either expired, issued to a different domain, or not recognized by your device's trusted root certificates.
Is it safe to 'Trust' a server certificate when this error appears?
Trusting a server certificate should only be done if you are certain of the server's identity and legitimacy. If you are using a well-known email provider (e.g., Gmail, Outlook, iCloud) and the error is unexpected, it might indicate a temporary issue or a misconfiguration. However, if you are unsure or the certificate details look suspicious, do not trust it, as it could expose your data to security risks. Instead, try other troubleshooting steps.
Why does this error appear suddenly when my mail was working before?
This error can appear suddenly due to several reasons. The mail server's SSL certificate may have expired and not been renewed, your email provider might have changed server hostnames or security protocols, or there could be a temporary network issue interfering with certificate validation. Incorrect date and time settings on your device can also cause certificates to appear invalid.
Does this error affect other apps on my iPhone?
Generally, this specific error message is confined to the Mail app because it relates to the security certificate of an email server. Other apps that connect to different servers for their services (e.g., web browsers, messaging apps) use their own separate connections and certificate validations. However, underlying network issues or incorrect date/time settings could potentially impact other apps' ability to establish secure connections.