FRE 901 vs FRE 902: Which Authentication Path Do You Need?

October 10, 2026 · Updated October 12, 2026

Every exhibit has to be authenticated before it can be admitted, and the Federal Rules of Evidence give you two ways to do it. Federal Rule of Evidence 901 is the general route: you offer evidence that the item is what you say it is, usually through a witness. Rule 902 is the shortcut: for a defined list of items, no outside evidence is needed at all, and for electronic records a written certification can stand in for the witness.

Picking the wrong route rarely loses a case outright. It does cost witnesses, trial days, and occasionally an exhibit. Here is how each rule works, where each one runs out, and how to choose.

The short answer

• Rule 901 always applies. You authenticate by producing evidence “sufficient to support a finding that the item is what the proponent claims it is.” In practice that means a witness with knowledge, the item’s own distinctive features, or proof that the process that made it is accurate.
• Rule 902 is optional and narrower. It covers fourteen categories that need “no extrinsic evidence of authenticity.” Four of them, 902(11) through 902(14), work by written certification from a qualified person plus advance written notice to the other side.
• For most digital exhibits, plan for 902 and keep a 901 path ready. The certification saves you a foundation witness when it works. When it does not, because notice was late or the question is who wrote something, Rule 901 is where you end up anyway.

What Federal Rule of Evidence 901 actually requires

Rule 901(a) asks for evidence “sufficient to support a finding” that the item is genuine. The bar is deliberately low. Authentication is a question of conditional relevance under Rule 104(b), so the judge does not decide whether the exhibit is authentic; the judge decides whether a reasonable jury could find that it is. As the Third Circuit put it in United States v. Browne, 834 F.3d 403 (3d Cir. 2016), “the jury, not the court, is the ultimate arbiter of whether an item of evidence is what its proponent claims it to be.” Doubts about genuineness usually go to weight, not admissibility.

Rule 901(b) then lists ten illustrations of evidence that meets the standard. They are examples, not a closed list:

1. Testimony of a witness with knowledge
2. A nonexpert’s opinion on handwriting, based on familiarity not acquired for the litigation
3. Comparison with an authenticated specimen, by an expert or by the jury
4. Distinctive characteristics, taken together with all the circumstances
5. Opinion identifying a voice
6. Evidence about a telephone conversation
7. Evidence that a public record came from the office where such records are kept
8. Ancient documents or data: at least 20 years old, kept where expected, in no suspicious condition
9. Evidence describing a process or system and showing that it produces an accurate result
10. A method of authentication allowed by a federal statute or a Supreme Court rule

Three of them do almost all the work for digital evidence.

901(b)(1), a witness with knowledge. The person who took the screenshot, sent the message, or saw the post testifies that the exhibit matches what they saw. Simple and effective, as long as that person is available, credible, and not you. A lawyer who captured the evidence personally may become a necessary witness, and ABA Model Rule 3.7, like your state’s version of it, generally bars a necessary witness from also acting as trial counsel; we cover that trap in are screenshots admissible in court.

901(b)(4), distinctive characteristics. The exhibit authenticates itself through its content and context: a username tied to the defendant, photos of places only he could access, details only the author would know. This is how most contested social media evidence gets authenticated. In United States v. Lewis, No. 24-20235 (5th Cir. 2025), Instagram posts were authenticated entirely circumstantially: an investigator’s testimony tying the account to the defendant, posts showing him in places only he could reach, and a victim’s testimony that he posted under that username. United States v. Lamm, 5 F.4th 942 (8th Cir. 2021) states the rule plainly: social media evidence may be authenticated “with circumstantial evidence linking the defendant to the social media account.”

901(b)(9), a process or system. Someone explains how the system that produced the exhibit works and why its output is accurate. This is the natural fit for anything a machine generated: logs, extractions, automated web captures.

Rule 901 can also fail, and the failures share a shape. In United States v. Vayner, 769 F.3d 125 (2d Cir. 2014), a printout of a social network profile bearing the defendant’s name and photo was not enough, because nothing showed he had created it. The Second Circuit vacated the conviction. A page proves it existed; it does not prove who wrote it.

What Rule 902 changes

Rule 902 opens with the operative sentence: the listed items “are self-authenticating; they require no extrinsic evidence of authenticity in order to be admitted.” For a sealed public document or a certified copy of a public record, that is enough to get it admitted, though the other side can still offer evidence that it is not genuine. We walk through all fourteen categories in what is self-authenticating evidence.

For electronic evidence, the paragraphs that matter are the four certification routes:

• 902(11) and 902(12): business records certified by a custodian or another qualified person. 902(11) covers domestic records; 902(12) covers foreign records, in civil cases only. See FRE 902(11) and 902(12) explained.
• 902(13): a record generated by an electronic process or system that produces an accurate result, the certification equivalent of 901(b)(9).
• 902(14): data copied from a device, storage medium, or file, authenticated by a process of digital identification, which in practice means matching hash values.

All four borrow the mechanics of 902(11). A qualified person signs a certification containing what a foundation witness would have said at trial, and you give the other side reasonable written notice before the trial or hearing, with the record and certification available for inspection. United States v. Dunnican, 961 F.3d 859 (6th Cir. 2020) shows the template working: a trained agent certified a phone extraction made with forensic software, with a hash confirming the copy was complete and accurate, and the Sixth Circuit, reviewing a certification the defense had not challenged at trial, held the evidence properly authenticated. The difference between 902(13) and 902(14) is its own topic, covered in FRE 902(13) vs 902(14).

Side by side

Where each route runs out

Rule 902 cannot prove authorship. This is the limit that catches people with social media evidence, and the 2017 Advisory Committee note says so in its own example: a defendant facing a certified webpage “remains free to object that the statement on the webpage was not placed there by defendant.” In Browne, the Third Circuit held that Facebook’s records certification could confirm that chats passed between certain accounts, but was no more proof of what the chats said than a postal receipt is of a letter’s contents. Who wrote them had to be shown another way, and the conviction stood only because other evidence authenticated the chats under Rule 901. United States v. Farrad, 895 F.3d 859 (6th Cir. 2018) applied the same reasoning: treating Facebook photos as self-authenticating on the strength of Facebook’s certificate was error, harmless only because the photos were independently authenticated under Rule 901.

Rule 902 depends on notice. In United States v. Wood, 109 F.4th 1253 (10th Cir. 2024), a 902(11) certificate reached the defense only after the jury had been chosen. The Tenth Circuit held that was not reasonable written notice, found the error was not harmless, and reversed the convictions. Courts can excuse a purely technical delay that causes no prejudice, but that is a risk you take on. Miss the notice and you are back to Rule 901, often on the day you were counting on not needing a witness.

Neither rule makes evidence admissible. Authentication answers one question: is the item what you say it is? The 2017 Advisory Committee note is direct that a certification “can establish only that the proffered item has satisfied the admissibility requirements for authenticity,” and the opponent remains free to object on hearsay, relevance, and other grounds.

Rule 901 runs out when nobody can vouch for the item. A screenshot with no witness who saw the page, no distinctive features tying it to its source, and no record of how it was made has nothing to stand on. That is the gap a documented capture process is designed to close.

Which route for which exhibit

• Platform records (subscriber data, login logs, account metadata): a 902(11) certification from the platform’s custodian.
• Who wrote a post or message: Rule 901, built on distinctive characteristics and a witness. A platform certificate will not carry this alone.
• A forensic copy of a phone or drive: 902(14), with the examiner’s certification and matching hashes.
• A web page as it appeared on a date: 902(13) for the capture system’s output and 902(14) for the hashed copy, with a 901(b)(9) witness on the process held in reserve.
• A screenshot a client took: Rule 901 through the client’s testimony, ideally backed by a better capture made before the page changes.
• State court: check your jurisdiction. Some states have adopted counterparts to 902(13) and 902(14); Pennsylvania’s, effective in 2020, are identical to the federal rules. Others have not, and the details differ.

The safest practice uses both rules on purpose, and the rules expect you to. The 2017 note says nothing in the electronic certification paragraphs “is intended to limit a party from establishing authenticity of electronic evidence on any ground provided in these Rules.” Serve your 902 notice early, so any challenge surfaces before trial, and keep a 901 witness or circumstantial showing ready for anything the certificate cannot cover. Farrad is the reason: the shortcut failed, and the case survived because Rule 901 was there underneath it.

Both rules are under review

Two pieces of committee work are worth knowing about before you cite either rule in a brief. Neither changes the law today.

Rules 104 and 902. Amendments to Rules 104 and 902 were published for comment on August 14, 2026, with comments closing February 15, 2027. The proposal would drop the label “conditional relevance” from Rule 104(b) but, according to its draft committee note, keep the same standard as “sufficient to support a finding.” The only Rule 902 change adds federally recognized tribes to the sealed public documents in 902(1)(A). If every stage approves, the earliest effective date is December 1, 2028.

AI-fabricated evidence. The Advisory Committee is working on a draft Rule 901(c) for exhibits challenged as AI fakes. In the draft, the challenger must first produce evidence sufficient to support a finding that the item was fabricated by generative AI, and the proponent must then show the item is more likely than not authentic. The draft would apply to items offered under either Rule 901 or Rule 902. As of October 2026 it has not been published for comment; the committee takes it up again on October 15, and a companion proposal on machine-generated evidence, Rule 707, was withdrawn after its comment period for further work. A capture whose process and hashes are documented from the moment it was made is the kind of exhibit that standard rewards.

Where Permavault fits

Permavault is built to give you both routes from one capture. Paste a URL and a neutral automated system captures the page as it rendered, records the URL, time, and process, and fingerprints every file with cryptographic hashes at capture. That is the raw material for a 902(13) certification about the capture system, a 902(14) certification about the hashed copy, and 901(b)(9) testimony about the process if you need it. Because the system makes the capture rather than you, you stay out of the chain of custody.

The capture is stored on a permanent decentralized network of roughly 300 independent nodes, funded by a long-term storage endowment, so the record and its proof are designed to stay verifiable whatever happens to any vendor. Including us.

Each capture is $4.99, down to $2.98 with a pack, and carries an independent Bitcoin-anchored timestamp. An optional $9 Certificate of Authenticity documents the capture process. The Legal certificate ($39) adds an RFC 3161 timestamp on the signed capture manifest, a chain-of-custody appendix, and a declaration template designed to support authentication under FRE 902(13) and 902(14). The Legal evidence package states whether the timestamp qualifies under eIDAS.

Frequently asked questions

Is Rule 902 better than Rule 901? Not better. Cheaper, when it fits. A good certification removes a foundation witness from your trial. But it covers only the listed categories, it needs advance notice, and it cannot prove who wrote something. Rule 901 is slower and always available.

Does a 902 certification make my exhibit admissible? No. It satisfies the authenticity requirement, and a 902(11) certificate also lays the foundation for the business-records hearsay exception in Rule 803(6). Every other objection stays open: relevance, the original document rule, hearsay within the record and, in criminal cases, confrontation. The other side can still dispute genuineness before the jury.

Can the other side still challenge a self-authenticated exhibit? Yes. The notice requirement exists so they can challenge the record and certification before trial, and they can still argue weight to the jury.

Who decides authenticity, the judge or the jury? Both, in sequence. Under Rule 104(b), the judge decides whether the evidence is sufficient for a reasonable jury to find the item genuine. If it is, the exhibit comes in and the jury decides whether it is what you say it is, and how much to believe it.

Do I need an expert for Rule 901(b)(9)? Not necessarily. The witness needs enough knowledge of the process or system to explain how it works and why it produces an accurate result. For a complex system that is often an expert. For a well-documented capture tool it can be someone who operates the tool and can explain its documented process, ideally not trial counsel.

This article is general information about the Federal Rules of Evidence, not legal advice for any specific matter. Rule text and Advisory Committee notes are quoted from the current official edition; the summaries above are paraphrases and the rule text controls. Admissibility always depends on the facts, the jurisdiction, and the judge.