How to Create and Use an App Password for Outlook

An app password is a unique password generated through your Microsoft account's security settings.

It allows certain older applications that cannot complete modern verification processes to access your account.

For example, an older email application might ask for your regular Microsoft password but fail to complete the additional verification required by two-step verification.

In supported situations, an app password provides an alternative sign-in method.

However, app passwords are not a universal solution for Outlook authentication problems.

Why Are App Passwords Important?

1. Keeps Your Regular Password Separate

An app password is different from your primary Microsoft account password. You can revoke it without changing your regular password.

2. Helps With Older Applications

Some legacy email applications may require an app password when two-step verification is enabled and the account permits this authentication method.

3. Resolves Certain Compatibility Issues

App passwords can help compatible older applications authenticate when they cannot complete the usual verification process.

Important: App passwords do not bypass an organization's security restrictions or restore authentication methods that Microsoft has disabled.

For most users, updating to a supported version of Outlook that uses modern authentication is the better long-term solution.

Not every Outlook sign-in problem requires an app password.

Whether you need one depends on your Microsoft account type, the application you're using, and the security settings applied to your account.

When an Outlook App Password May Help

An app password may be useful when:

• Two-step verification is enabled on your Microsoft account.
• You're using an older application that cannot complete modern authentication.
• The account's security settings allow app passwords.
• Your email application supports the authentication method required by the account.

When You Shouldn't Create an App Password

You generally don't need an app password when:

• You're using Outlook on the web.
• Your Outlook application already supports modern authentication.
• Your Microsoft 365 administrator has disabled app passwords.
• Your organization requires a different authentication method.
• Your Outlook problem is caused by a damaged profile, incorrect configuration, or network connectivity.

If you're unsure whether an app password is necessary, first identify your account type and the exact Outlook sign-in error.

If you use a personal Microsoft account, such as Outlook.com, Hotmail.com, or Live.com, you may be able to generate an app password through your Microsoft account security settings.

The following instructions apply to personal Microsoft accounts.

Step 1: Sign In to Your Microsoft Account

Visit Microsoft's official account security page:

https://account.microsoft.com/security

Sign in using the Microsoft account associated with your Outlook email address.

Step 2: Open Advanced Security Options

After signing in:

• Open the Security section.
• Find Advanced security options.
• Complete any required identity verification.
• Review your account's two-step verification settings.

Microsoft may occasionally change the names or layout of these settings.

Step 3: Enable Two-Step Verification

App passwords for personal Microsoft accounts are associated with two-step verification.

If two-step verification isn't already enabled:

• Locate the Two-step verification section.
• Select the available setup option.
• Follow Microsoft's instructions.
• Configure your preferred verification method.
• Save any recovery information Microsoft provides.

Security Tip: Keep your recovery information in a secure location. Never share verification codes or recovery codes with anyone claiming to provide technical support.

Step 4: Generate a New App Password

Once two-step verification is enabled:

• Return to Advanced security options.
• Locate the App passwords section.
• Select Create a new app password.
• Microsoft will generate a unique password.
• Copy the password carefully.

The option may not appear if your account configuration doesn't support app passwords.

Step 5: Use the App Password in Outlook

If you're using an older compatible Outlook application that requires an app password:

• Open Outlook.
• Locate the password prompt for your email account.
• Enter the generated app password instead of your regular Microsoft password.
• Complete the sign-in process.
• Check whether Outlook can send and receive email.

If Outlook displays a modern Microsoft sign-in window, use the normal supported sign-in process instead of trying to force an app password.

Important: Never share your generated app password with another person. Treat it like any other account credential.

Creating an app password for a Microsoft 365 work or school account is different from creating one for a personal Microsoft account.

Microsoft 365 organizations manage authentication through Microsoft Entra ID and administrator-controlled security policies.

Because of these policies, the app password option may not be available.

Step 1: Open Microsoft 365 Security Information

Visit:

https://mysignins.microsoft.com/security-info

Sign in using your work or school Microsoft 365 account.

Step 2: Review Available Sign-In Methods

On the Security info page, review the authentication methods available to your account.

Depending on your organization's settings, these may include:

• Microsoft Authenticator.
• Phone verification.
• Security keys.
• Other administrator-approved authentication methods.

Some organizations may also permit app passwords for specific legacy authentication scenarios.

Step 3: Check Whether App Passwords Are Available

If your organization allows app passwords and the feature is available to your account, you may see an option to add or create an app password.

If the option doesn't appear, don't assume something is wrong with your account.

Your organization may have disabled app passwords for security reasons.

Step 4: Contact Your Microsoft 365 Administrator if Necessary

If your account doesn't provide an app password option, contact your organization's Microsoft 365 administrator.

The administrator can review:

• Microsoft Entra authentication policies.
• Multifactor authentication settings.
• Security Defaults.
• Legacy authentication restrictions.
• Supported Outlook authentication methods.

Important: Microsoft 365 Exchange Online no longer supports Basic Authentication for the affected protocols. Generating an app password cannot restore Basic Authentication where it has been disabled.

For Outlook and Microsoft 365, using a supported application with modern authentication is generally the recommended solution.

Many users search for an Outlook app password inside the Outlook application itself.

However, app passwords are generally created through Microsoft account security settings, not directly inside Outlook.

The correct location depends on the type of account you're using.

Personal Outlook.com, Hotmail, or Live Account

Visit:

https://account.microsoft.com/security

Open Advanced security options and look for App passwords.

Microsoft 365 Work or School Account

Visit:

https://mysignins.microsoft.com/security-info

Review the available sign-in methods.

If app passwords aren't listed, your organization's authentication policies may prevent their use.

Can You Generate an App Password Directly in Outlook?

No. Outlook itself doesn't normally generate Microsoft account app passwords.

You create an app password through the relevant account security portal and then use it in a compatible application when required.

One of the most common problems users encounter is being unable to find the app password option.

This doesn't necessarily mean the Microsoft account is broken.

Several security settings can affect whether app passwords are available.

1. Your Organization Has Disabled App Passwords

Microsoft 365 administrators can restrict legacy authentication methods and app password availability.

If the option has been disabled, individual users generally cannot enable it themselves.

2. Security Defaults Are Enabled

Microsoft Entra Security Defaults are designed to improve account protection by restricting legacy authentication.

Organizations using Security Defaults generally cannot use app passwords for legacy authentication.

3. Your Account Uses Modern Authentication

Modern Outlook applications use authentication methods that don't require app passwords.

In these situations, the absence of an app password option may be expected.

4. Your Account Doesn't Meet the Requirements

For personal Microsoft accounts, two-step verification generally needs to be enabled before app password settings become available.

For work or school accounts, availability depends on organizational policies.

5. Your Organization Uses Different Authentication Policies

Some organizations use Conditional Access or other Microsoft Entra security controls.

These policies may restrict the authentication methods available to users.

What Should You Do if the App Password Option Is Missing?

First, confirm whether you're using a personal Microsoft account or a Microsoft 365 work or school account.

Then:

• Check the appropriate Microsoft security portal.
• Confirm whether two-step verification is enabled.
• Determine whether your Outlook version supports modern authentication.
• Review your organization's security requirements.
• Contact your Microsoft 365 administrator if necessary.

Avoid disabling security features simply to make an older email application work.

Yes, app passwords can still be used in certain supported account and application configurations.

However, their usefulness is much more limited than it was in the past.

Microsoft has moved toward modern authentication methods that provide stronger account protection.

App Passwords with Personal Microsoft Accounts

Personal Microsoft accounts may still provide app passwords for compatible older applications when two-step verification is enabled.

However, the application must also use an authentication method that Microsoft still permits.

App Passwords with Microsoft 365

For Microsoft 365 work and school accounts, app password availability depends on organizational policies.

Even when an app password can be generated, it won't work with Exchange Online authentication methods that Microsoft has retired.

What Is Modern Authentication?

Modern authentication uses newer sign-in technologies, including OAuth-based authentication, rather than relying on an application repeatedly submitting a username and password.

It supports stronger security controls and modern multifactor authentication experiences.

What's the Best Option for Outlook Users?

For most users, the recommended approach is to:

• Use a supported Outlook version.
• Keep Microsoft 365 applications updated.
• Enable appropriate multifactor authentication.
• Follow Microsoft's supported sign-in process.
• Avoid relying on outdated email applications.

If an older Outlook version cannot authenticate, upgrading the application may be necessary.

Even when app passwords are supported, small setup mistakes can prevent authentication.

Common mistakes include:

Using Your Regular Microsoft Password

A compatible older application may require the generated app password instead of your normal account password.

Copying the Password Incorrectly

Extra spaces or missing characters can cause authentication failures.

Using an Old or Revoked App Password

An app password may stop working if it has been revoked or account security settings have changed.

Using an Unsupported Outlook Version

Some outdated Outlook applications may no longer support the authentication methods required by Microsoft.

Trying to Bypass Microsoft 365 Security Policies

App passwords cannot override administrator restrictions or restore retired authentication methods.

If the application still won't sign in, investigate the authentication method before generating additional passwords.

Outlook authentication problems can display several different error messages.

Examples include:

• Outlook keeps asking for your password.
• Authentication failed.
• Cannot connect to the server.
• Your credentials need attention.
• Outlook cannot authenticate.
• Something went wrong.
• Password incorrect.
• We couldn't sign you in.

These messages don't always indicate an app password problem.

They can also result from:

• Incorrect account credentials
• Corrupted Outlook profiles
• Outdated applications
• Microsoft 365 authentication policies
• Network connectivity problems
• Account security restrictions

Write down the exact error message before attempting additional troubleshooting.

If Outlook repeatedly asks for your password, the issue may involve saved credentials, authentication settings, or the Outlook profile itself.

Creating an app password won't necessarily resolve these problems.

1. Remove Outdated Saved Credentials

Windows Credential Manager may contain outdated credentials associated with Outlook or Microsoft Office.

If appropriate, remove the specific outdated credentials and restart Outlook.

Be careful not to remove unrelated saved passwords.

2. Update Microsoft Outlook

Open Outlook and check whether updates are available.

Using a supported version of Outlook helps maintain compatibility with Microsoft's current authentication requirements.

3. Check Your Microsoft Account

Try signing in through the appropriate Microsoft web portal.

If the account cannot sign in through the web, resolve the account authentication problem before troubleshooting Outlook.

4. Repair Your Outlook Profile

A damaged Outlook profile can cause repeated sign-in prompts, synchronization errors, and account configuration problems.

Depending on your Outlook version, repairing the account or creating a new profile may help.

5. Verify Multifactor Authentication Settings

Check whether the account requires additional verification.

For Microsoft 365 work or school accounts, your administrator may need to review the account's authentication configuration.

6. Create a New Outlook Profile if Necessary

If the existing Outlook profile is corrupted, creating a new profile may resolve the problem.

Before removing or replacing a profile, confirm that important local Outlook data is backed up and that the account can be configured again.

If Outlook continues asking for your password, MicroSec® can help investigate the underlying authentication and configuration problems through remote email troubleshooting.

If your Outlook app password isn't working, don't automatically assume the generated password is incorrect.

The problem may involve account security settings or unsupported authentication methods.

Step 1: Confirm That App Passwords Are Supported

Check whether your Microsoft account and email application support app passwords.

If you're using Microsoft 365, verify that your organization permits the required authentication method.

Step 2: Check Whether the Password Was Revoked

If an app password was deleted or revoked, it can no longer be used.

For supported configurations, create a replacement through the appropriate Microsoft security portal.

Step 3: Remove Outdated Outlook Credentials

Check Windows Credential Manager for outdated credentials associated with the affected account.

Remove only the relevant entries when appropriate.

Step 4: Restart Outlook

Close Outlook completely and reopen it.

If the application supports app password authentication, enter the newly generated password when prompted.

Step 5: Check Outlook Compatibility

If the application uses an authentication method Microsoft no longer supports, generating another app password won't fix the problem.

A supported Outlook version or another modern authentication-compatible email application may be required.

Step 6: Investigate Other Authentication Problems

If Outlook still won't sign in, check for:

• Corrupted Outlook profiles.
• Incorrect email account settings.
• Microsoft 365 security restrictions.
• Account synchronization problems.
• Outdated Outlook installations.

For persistent problems, our remote Email Troubleshooting Services can help diagnose Outlook and Microsoft 365 authentication issues.

Another common Microsoft 365 problem occurs when Outlook cannot connect to the email server.

This error isn't always related to an app password.

Common Causes

Internet Connectivity Problems

An unstable internet connection can prevent Outlook from communicating with Microsoft's servers.

Microsoft 365 Service Outages

Temporary service disruptions can affect email access and synchronization.

Incorrect Account Configuration

Incorrect account settings may prevent Outlook from establishing a connection.

Firewall or Antivirus Interference

Certain security configurations can interfere with email connectivity.

Corrupted Outlook Data Files

Damaged Outlook data files or profiles may cause connection and synchronization errors.

Troubleshooting Steps

Before contacting technical support:

• Verify that your internet connection works.
• Check whether Outlook on the web is accessible.
• Review Microsoft 365 service status when available.
• Restart Outlook and your computer.
• Update Outlook to a supported version.
• Review account configuration settings.
• Check whether VPN or security software is interfering with the connection.

Avoid disabling important security protections unnecessarily.

If Outlook still cannot connect, the issue may involve your Outlook profile, Microsoft 365 configuration, or network settings.

MicroSec® provides remote troubleshooting for Outlook connectivity, email synchronization, and Microsoft 365 configuration problems.

If you've followed the app password instructions but Outlook still doesn't work, the problem may be unrelated to authentication.

Several other issues can prevent Outlook from functioning correctly.

Corrupted Outlook Profile

A damaged profile can cause Outlook to freeze, display repeated password prompts, or stop synchronizing emails.

Outlook Add-In Conflicts

Some third-party add-ins can interfere with Outlook's normal operation.

Testing Outlook in Safe Mode may help identify add-in-related problems in supported classic Outlook versions.

Outdated Outlook or Windows

Unsupported or outdated software may experience compatibility problems with Microsoft 365 services.

Background Synchronization Problems

Outlook may open successfully but fail to download or send messages because of synchronization errors.

Incorrect Microsoft 365 Configuration

Account licensing, authentication policies, and mailbox configuration can affect Outlook access.

If you're experiencing several of these problems, troubleshooting the actual cause is more effective than repeatedly changing your password.

ASP stands for Application-Specific Password.

It's another term commonly used for an app password.

If you're searching for how to generate an ASP in Outlook email, the process depends on your Microsoft account type.

For personal Microsoft accounts, check the Advanced security options in your Microsoft account.

For Microsoft 365 work or school accounts, review the Security info page and your organization's authentication requirements.

Remember that an ASP isn't required for modern Outlook applications that already support Microsoft's current authentication methods.

Protecting your Outlook account is just as important as resolving sign-in problems.

Use a Supported Outlook Version

Keep Outlook and Microsoft 365 applications updated to maintain compatibility and receive security improvements.

Enable Multifactor Authentication

Use Microsoft's supported multifactor authentication options whenever available.

Protect Your App Passwords

Never share app passwords through email, chat, or unsolicited support requests.

Revoke passwords you no longer need.

Review Microsoft Account Activity

Check your Microsoft account's recent sign-in activity for unfamiliar login attempts.

Keep Recovery Information Updated

Maintain accurate recovery email addresses and phone numbers.

Use Trusted Security Software

Reliable endpoint protection can help identify malicious files, suspicious applications, and other threats.

Security solutions such as Bitdefender can provide additional protection against malware and other cybersecurity threats.

Watch Out for Fake Microsoft Security Alerts

Scammers sometimes display fake Microsoft warnings or Outlook security messages to trick users into sharing credentials.

Always access account security settings through Microsoft's official websites.

Not every Outlook sign-in issue requires an app password.

The following table explains when an app password may help and when another solution is more appropriate.

The best solution depends on the exact error and your account's authentication requirements.

At MicroSec®, we understand how frustrating Outlook sign-in errors, repeated password prompts, and Microsoft 365 configuration problems can be.

Our technicians provide practical remote assistance to help individuals, homeowners, seniors, and small businesses resolve email-related issues.

How MicroSec® Can Help

Outlook Sign-In Troubleshooting

We investigate repeated password prompts, account authentication failures, and login errors.

Microsoft 365 Support

We help diagnose Microsoft 365 account configuration, Outlook connectivity, and email synchronization problems.

Email Account Troubleshooting

Our team assists with common email problems involving Outlook, Gmail, Yahoo, AOL, and Apple Mail.

Outlook Profile Repair

We troubleshoot damaged Outlook profiles, account configuration issues, and related application errors.

Remote Technical Assistance

Many software-related email problems can be diagnosed and resolved remotely without requiring an in-person appointment.

Our goal is to identify the underlying issue and recommend an appropriate solution rather than repeatedly changing passwords without understanding the cause.

Creating an app password for Outlook can help in certain situations, particularly when an older compatible application cannot complete the normal account verification process.

However, modern Outlook applications generally don't require app passwords.

For Microsoft 365 work or school accounts, authentication policies and administrator settings determine which sign-in methods are available.

If Outlook continues asking for your password, cannot connect to the server, or fails to synchronize emails, the problem may require additional troubleshooting.

MicroSec® provides remote email and Microsoft 365 support for customers in Waterford, Albany, Schenectady, and across the United States.

Still having trouble signing in to Outlook or Microsoft 365? Explore our remote Outlook and email support services to get professional help with login errors, password prompts, and email synchronization problems.

Whether you're dealing with repeated password prompts, account configuration errors, or Outlook synchronization problems, our technicians can help investigate the issue remotely.

Get Remote Email Support

Visit MicroSec® to learn more about our professional email troubleshooting services.

How do I create an app password for Outlook?

For a personal Microsoft account, sign in to Microsoft's account security portal, open Advanced security options, and enable two-step verification if necessary. If app passwords are supported, select the option to create a new app password. For Microsoft 365 work or school accounts, availability depends on your organization's authentication policies.

Where can I find my Outlook app password?

You generally create app passwords through your Microsoft account security settings rather than inside Outlook. For personal accounts, visit Microsoft's account security page. For work or school accounts, review your Microsoft 365 Security info page. Previously generated app passwords may not be displayed again.

Why does Outlook keep asking for my password?

Outlook may repeatedly request your password because of outdated saved credentials, a corrupted Outlook profile, unsupported authentication methods, account security restrictions, or Microsoft 365 configuration problems. Creating an app password won't resolve every cause.

Why is my Outlook app password not working?

An Outlook app password may fail because it was revoked, entered incorrectly, or used with an unsupported authentication method. Microsoft 365 administrator policies may also prevent app password authentication.

Can I use an app password with Microsoft 365?

App passwords are available only in certain Microsoft 365 configurations where organizational policies permit them. They cannot restore Basic Authentication for Exchange Online protocols where Microsoft has disabled it.

Can I use an app password with Outlook 365?

Modern Microsoft 365 Outlook applications generally use modern authentication and don't require app passwords. Some older applications may support app passwords in permitted configurations, but this depends on the account and authentication method.

How do I get an app password for Outlook.com?

Sign in to your personal Microsoft account, open Advanced security options, and check the App passwords section. Two-step verification generally needs to be enabled. The option may be unavailable depending on your account configuration.

Why is the app password option missing from Microsoft 365?

The option may be missing because your organization disables app passwords, uses Security Defaults, or restricts legacy authentication. Contact your Microsoft 365 administrator to confirm which authentication methods are supported.

Is an app password the same as my Microsoft password?

No. An app password is a separate credential generated for a compatible application. Your regular Microsoft password remains the primary credential for your account.

Can I create multiple Outlook app passwords?

Supported Microsoft account configurations may allow multiple app passwords. However, you should generate them only when necessary and revoke credentials that are no longer used.

Do I need an app password for the latest Outlook?

Generally, no. Supported modern Outlook applications use modern authentication methods and typically don't require app passwords.

What should I do if Outlook still won't sign in?

First, verify that your Microsoft account works through the appropriate web portal. Then check your Outlook version, saved credentials, authentication settings, and account configuration. If the issue continues, professional email troubleshooting may help identify the cause.