iOS 'Cannot Verify Server Identity' error fix

Quick answer

Turn off automatic date & time in Settings > General > Date & Time, manually set the correct date, then toggle it back on. If that doesn't work, forget and rejoin your Wi-Fi network.

Why this happens

Seen this one a lot. The 'Cannot Verify Server Identity' error pops up most often in Apple's Mail app, but also in Safari and third-party apps like Outlook. The core issue: your iPhone checks the SSL certificate presented by the server — that certificate has an expiration date and a chain of trust. If your phone's clock is wrong, the certificate looks expired or invalid. Or the Wi-Fi network is injecting a proxy certificate (common in hotels, airports, or corporate networks). I had a client last month whose iPhone was 3 hours off because the time zone was set to automatic but the network was slow to update.

Fix steps — most effective first

1. Check Date & Time settings.
   Go to Settings > General > Date & Time. Turn off Set Automatically. Manually set the correct date and time for your time zone. Then toggle Set Automatically back on. This flushes the cached time and forces a fresh sync. Test the connection.
2. Forget and rejoin Wi-Fi.
   If step 1 doesn't work, go to Settings > Wi-Fi, tap the little i next to your network, choose Forget This Network, then reconnect with the password. This clears any cached proxy settings or captive portal junk.
3. Check for profile or VPN interference.
   Go to Settings > General > VPN & Device Management. If you see any configuration profiles you didn't install (especially from work or school), remove them. Also turn off any active VPN. Some corporate VPNs rewrite certificates.
4. Update iOS.
   Apple patches certificate trust issues regularly. Go to Settings > General > Software Update. If an update's available, install it. iOS 17.4 fixed a batch of these for Exchange mail servers.
5. Reset network settings.
   Go to Settings > General > Transfer or Reset iPhone > Reset > Reset Network Settings. This wipes saved Wi-Fi networks and passwords, but it often clears deep certificate cache. You'll need to rejoin Wi-Fi after.

Alternative fixes if the main steps fail

If you're still stuck, try these:

• Delete and re-add the email account. Go to Settings > Mail > Accounts, tap the account, choose Delete Account (don't worry, mail stays on server), then re-add it. This forces a fresh SSL handshake.
• Use a different DNS server. If your Wi-Fi's DNS is blocking or redirecting certificate validation, switch to 8.8.8.8 (Google) or 1.1.1.1 (Cloudflare). You can set this in Settings > Wi-Fi > [network] > Configure DNS.
• Turn off SSL temporarily. For Mail accounts, go to Settings > Mail > Accounts > [account] > Account > SMTP, tap the server, and toggle Use SSL off. I don't recommend this as a long-term fix — it's a security risk — but it'll tell you if the error is SSL-related. Re-enable it after testing.

Prevention tip

The most common cause is a drifting iPhone clock. Once a month, manually open Settings > General > Date & Time and toggle Set Automatically off and on again. Takes 10 seconds and prevents 80% of these errors. Also avoid using public Wi-Fi for email unless you use a VPN. Hotel networks are notorious for breaking certificate validation.

Pro tip from a real case: A client's iPhone kept throwing this error every Monday morning. Turns out their office Wi-Fi rotated proxy certificates weekly but the iPhone cached the old one. Forgetting and rejoining the network every Monday fixed it instantly.