diff --git a/lib/client/client.c b/lib/client/client.c
index 5a8228d8..cf119c88 100644
--- a/lib/client/client.c
+++ b/lib/client/client.c
@@ -759,6 +759,13 @@ lws_client_interpret_server_handshake(struct lws *wsi)
 		return 0;
 	}
 
+	if (p && !strncmp(p, "401", 3)) {
+		lwsl_warn(
+		       "lws_client_handshake: got bad HTTP response '%s'\n", p);
+		cce = "HS: ws upgrade unauthorized";
+		goto bail3;
+	}
+
 	if (p && strncmp(p, "101", 3)) {
 		lwsl_warn(
 		       "lws_client_handshake: got bad HTTP response '%s'\n", p);