Authenticating Text Messages in Court

The Rule: FRE 901 Applied to Text Messages

Federal Rule of Evidence 901 sets the standard for authenticating any evidence, including text messages. The rule does not impose a single formula; instead, it requires the proponent to "produce evidence sufficient to support a finding that the item is what the proponent claims it is."[4] Courts apply this framework to text messages by examining whether the proponent has established, through sufficient evidence, that a particular text message is what it purports to be—typically, that it was sent by a specific person at a specific time.[1]

Authentication is a prerequisite to admissibility but is distinct from it. Authentication establishes a foundation for evidence, but other rules—hearsay, relevance, prejudice—govern whether an authenticated message may be received. But authentication must be established first. Without it, the text message has no foundation and cannot be admitted at all.

Establishing Sender Identity: The Critical Requirement

The threshold question in any text message authentication is: who sent this message? Courts have identified several factors that together support a finding of sender identity.[2]

The listed phone number serves as a starting point. If the message is attributed to a phone number known to belong to the purported sender, that fact supports authentication. But a phone number alone is insufficient. A phone can be stolen, borrowed, or accessed by an unauthorized user. Courts therefore look to additional corroborating evidence.

The substance and context of the message matter significantly. Does the message contain information, phraseology, or references that would be peculiar to the purported sender? If a witness testifies that the sender has a distinctive manner of speaking or writing, and the message reflects that manner, the court may find that the substance supports sender identity. Similarly, if the message responds to an earlier communication in a way that suggests the sender had personal knowledge of prior exchanges, that pattern of response can corroborate identity.

Other corroborative evidence may include: the contents of the phone from which the message was retrieved (such as contact lists showing the number associated with the sender's name); the context of the messaging thread and whether it reflects a recognizable pattern of interaction; and any independent evidence that confirms the sender's location, actions, or knowledge at the time the message was sent. The stronger and more varied the corroboration, the more compelling the authentication.

For messages from accounts rather than phone numbers—such as social media accounts or email addresses—courts usually look for more than the name attached to the account. In federal court the test is still the ordinary Rule 104(b) sufficiency standard, but evidence that the purported sender owned the account, while relevant, is often not enough on its own, and standards vary by jurisdiction. Instead, courts examine the control and use of the account: who had access to it, how many people could have sent the message, what other interactions support that the purported sender was the account holder, and what is the overall pattern of use.[2] This reflects judicial recognition that accounts can be compromised, shared, or used fraudulently.

Witness Testimony: The Most Common Authentication Method

FRE 901(b)(1) gives, as one example, "Testimony that an item is what it is claimed to be."[4] The witness need not be the sender. Rather, the witness must have personal knowledge sufficient to establish that the evidence is what the proponent claims. For text messages, this typically means the witness received the message, recognizes the phone number or account, understands the context of the conversation, and can testify to any distinctive characteristics of the sender's communication style.

Witness testimony is the most frequently used authentication method for text messages in practice.[2] The witness testifies, typically from a printout of the text message thread or a screenshot displayed in court, and answers questions designed to establish sender identity: Is this your conversation? Do you recognize the phone number? How did you know it was from [person]? Had you received messages from this number before? Do you know whose phone number this is? What in the conversation makes you confident this person was the sender?

The witness's in-court testimony is what authenticates the evidence. The printout or screenshot is the exhibit that the testimony authenticates. The court is concerned with whether the witness has personal knowledge and whether that knowledge supports the conclusion that the message came from the person to whom it is attributed.

Screenshots and Their Limitations

Screenshots present a particular authentication challenge. A screenshot is an image capture of what appears on a device screen at a moment in time. Because a screenshot itself is not a direct output of a messaging system—it is an image of that output—courts look closely at the foundation offered for it.

Courts recognize that screenshots can be easily altered, deleted, or manipulated. A user can capture only part of a conversation, edit the image, change the date or time display on their device, or combine fragments to create a misleading impression. The ease of manipulation is why a screenshot usually needs corroborating testimony or other evidence before it is authenticated.[2]

Once authenticated, a screenshot may be admitted as substantive evidence, subject to hearsay and the other rules. A court in a particular case may instead allow it only as a demonstrative aid. In at least one federal prosecution, the court instructed the jury that screenshot exhibits would not be received as substantive evidence but were presented as a demonstrative aid to the testimony, which the jury could use only to that extent.[7] That was a ruling in one case, not a general rule.

Where possible, practitioners should obtain and present the underlying data—either through direct device examination or through certified extracts from the device—rather than relying on screenshots alone. This reduces the evidentiary vulnerability that attaches to visual images that can be easily altered.

Modern Self-Authentication: Rules 902(13) and 902(14)

Two 2017 amendments to the Federal Rules of Evidence created new self-authentication pathways for digital evidence. These rules allow authentication by certification without live testimony—a significant advantage in litigation where witness availability may be limited or where the volume of digital evidence is large.

Rule 902(13): Electronic Process or System

Rule 902(13) permits self-authentication of a record "generated by an electronic process or system that produces an accurate result", as shown by a qualified person's certification.[5] This rule applies to data produced by a system's own operations—for example, the metadata created by a messaging app, the timestamp applied by a server, or the logs generated by a security system. To qualify, according to the Advisory Committee Note, the certification must contain information that would be sufficient to establish authenticity if a witness provided it at trial.[3] That certification must set forth: (1) the certifier's qualifications; (2) the substance of the testimony the certifier would give if present; and (3) the process the certifier followed to generate the evidence.[3]

For a text message, Rule 902(13) might apply if, for example, a telecommunications company certifies that a particular message was generated by its messaging infrastructure at a particular timestamp, subject to its documented procedures and security protocols.

Rule 902(14): Digital Copy from Device

Rule 902(14) is often more directly applicable to text messages. FRE 902(14) makes data copied from an electronic device, storage medium, or file self-authenticating if it is authenticated by a process of digital identification, shown by a qualified person's certification, with Rule 902(11) notice. The Advisory Committee Note identifies hash comparison as the usual method.[5] This rule contemplates the extraction of text messages from a phone or other device and their certification as an accurate digital copy of what was on the device. Like 902(13), the certification must establish the qualifications of the person who extracted the data, the process they used (including any forensic tools, write protections, or verification methods), and the fact that the copy is an accurate and unaltered representation of the original.[3]

Rule 902(14) is particularly valuable in criminal investigations and litigation where a forensic examiner extracts messages from a device, because it allows that extraction to be submitted without requiring the examiner to testify in person—so long as the certification meets the rule's requirements. The proponent must give the adverse party reasonable written notice and make the record and certification available for inspection, so the opponent has a fair opportunity to challenge them; the rule does not give the opponent a right to call the certifier. In criminal cases, the Advisory Committee Note makes clear that objections under the Confrontation Clause remain available.[5]

Combining Methods: No Single Answer

Authentication of text messages often involves more than one method. A litigant might use witness testimony to establish sender identity while also providing a forensic extraction with a Rule 902(14) certification to establish that the messages extracted are accurate copies of what was on the device. An investigator might rely on 902(14) certification for the bulk of extracted messages while calling a witness to authenticate a subset of particularly probative exchanges.

The sufficiency of authentication is determined by the court, which may admit evidence provisionally subject to later corroboration, and which applies a relatively permissive standard. The proponent need only present evidence sufficient to support a finding that the evidence is what is claimed—not proof beyond reasonable doubt or even a preponderance. If reasonable minds could differ on the question, the evidence is properly admitted and the weight and credibility of the authentication evidence becomes a question for the jury.[4]

Implications for Practice

Authentication of text messages requires deliberate attention to documentation and process. For forensic examiners: preserve the chain of custody, document the tool used and its write-protection status, and retain the ability to certify the extraction process. For investigators: contemporaneously note the source of messages (was it provided by a party? extracted from a device in your custody?), identify any screenshots or printouts as such, and maintain contact information for witnesses who can testify to sender identity. For counsel: evaluate whether witness testimony, Rule 902(13) or 902(14) certification, or both will best serve your proof, and plan the evidence accordingly.

Authentication is not an obstacle to the admission of text messages—the framework exists precisely to permit their admission—but it is a requirement that demands proof of identity, reliability, and integrity. Meeting that requirement at the outset protects against later challenges and builds a solid foundation for evidence that is increasingly central to litigation.