App Passwords Need To Be Updated

You do not need to update every Microsoft 365 app; take action only if an older app or device stops connecting because it cannot perform two-step verification.

An app password is a randomly generated password used instead of your normal Microsoft account password by legacy software. It is unrelated to the Microsoft Authenticator app. Examples include Outlook 2010 or earlier, some older phone mail apps, Xbox 360, and devices such as mail-sending security cameras.^1^

What to do

• If Outlook on the web and your current applications work normally: no action is required. You do not need to determine an app in advance or create an app password “just in case.”
• If an older app or device now reports an incorrect password: that is the app or device referenced by the email. Create a new app password and enter it into that application’s password field instead of your regular Microsoft account password.
• If you no longer use the older app or device: leave it disconnected; no replacement app password is needed.

To create one for a personal Microsoft account:

1. Open your Microsoft account dashboard directly rather than using the email button.
2. Go to Security → Manage how I sign in → Advanced security options.
3. Find App passwords and create a new one.
4. Copy the generated password and paste it into the affected legacy app or device where it requests your normal password.

App passwords are entered once and cannot be recovered later; if one is forgotten or must be replaced, generate another.^1^

About not using Microsoft Authenticator

Authenticator is only one possible verification method. Two-step verification can also use other security information configured on the account. Because two-step verification requires access to additional verification methods, keep multiple current recovery methods—such as an alternate email address and phone number—on the account.^2^

If Authenticator is still listed but is no longer available to you, remove or replace that method under Security → Manage how I sign in, but first ensure another working verification method is registered so that you do not lose account access.

References

1. How to get and use app passwords | Microsoft Support
2. How to use two-step verification with your Microsoft account | Microsoft Support