You need to connect Outlook to an account with multi-factor authentication, but the standard password fails. Modern authentication requires an interactive login, which older apps cannot complete. An app password is a unique code that bypasses this requirement for specific applications. This article explains how to create and use an app password for Outlook on Windows.
Key Takeaways: Creating an App Password for Outlook
- Security > More security options > Create a new app password: The primary path in your Microsoft account security settings to generate a 16-character password.
- Account Settings > Change Account: The location in Outlook where you replace your regular password with the newly generated app password.
- Ctrl+Alt+Delete > Lock: A quick way to secure your PC after entering an app password, which is stored in plain text within Windows Credential Manager.
What an App Password Does in Outlook
Multi-factor authentication adds a critical security layer by requiring a second verification form, like a code from an authenticator app. This process is called modern authentication. Legacy email applications, including some older versions of Outlook, cannot present the modern login prompts required for this second factor.
An app password is a 16-character code that acts as a stand-in for your account password. It grants access only to the specific application you set it up for, like Outlook on your desktop. You must generate this password from your Microsoft account security portal while signed in. The system treats this code as a full authentication credential, so you must keep it as secure as your main password.
Prerequisites for Creating an App Password
You need a few things ready before starting. Your Microsoft account must have multi-factor authentication already turned on. You can check this in your account security settings. You must also know your current account password to sign in to the security portal. Ensure you are using a device with internet access and a web browser. The app password feature is available for personal Microsoft accounts and for work or school accounts where your administrator has not disabled the option.
Steps to Create and Apply an App Password
Follow these steps to generate the password and configure Outlook to use it. The process is the same for Outlook included with Microsoft 365 and the standalone version.
- Sign in to your Microsoft account security page
Open a web browser and go to account.microsoft.com/security. Sign in with your email address and password, and complete any multi-factor authentication prompts. - Navigate to the advanced security options
On the security page, find and select the link labeled “Advanced security options.” This link may also be called “More security options” depending on your account type. - Generate a new app password
In the advanced security section, look for a subsection titled “App passwords.” Select the option to “Create a new app password.” The system will display a 16-character code on your screen. - Copy the app password immediately
Select the code and copy it. You will not see this password again after you leave the page. Paste it into a temporary text file or notepad for the next step. - Open Outlook Account Settings
In Outlook, go to File > Account Settings > Account Settings. Select your email account from the list and choose “Change.” - Enter the app password in Outlook
In the password field, delete your old password. Paste the 16-character app password you copied. Select “Next” to test the connection. Outlook should verify the account successfully.
Common Mistakes and Limitations to Avoid
“App Passwords Option Is Missing from My Security Page”
This usually means multi-factor authentication is not active for your account. Go back to the main security page and enable MFA first. For work or school accounts, your IT administrator may have disabled app passwords entirely. You must contact your help desk for an alternative method, like using the modern authentication-compatible Outlook version.
“Outlook Still Asks for a Password After I Enter the App Password”
This often happens if you mistyped the code. App passwords are case-sensitive. Close the password prompt and re-enter the credentials in Account Settings. Ensure you are pasting the entire 16-character string with no extra spaces. If the problem continues, generate a new app password and try again, as the old one may have been corrupted.
“I Lost My App Password and Need a New One”
You cannot retrieve a lost app password. You must revoke the old one and create a new one. Return to the “App passwords” section in your security settings. Find the list of existing passwords and revoke the one you lost. Then, generate a new password and update Outlook with the fresh code.
App Passwords vs Modern Authentication in Outlook
| Item | App Password | Modern Authentication |
|---|---|---|
| Primary Use | Legacy applications that cannot show MFA prompts | Modern apps like Outlook for Microsoft 365 |
| Security Level | Single static password stored by the app | Dynamic, session-based tokens with conditional access |
| User Experience | Enter once during setup, no further prompts | Periodic re-authentication with MFA prompts |
| Management | User creates and revokes in account portal | Managed by IT policies and Azure Active Directory |
| Outlook Version Support | Older versions like Outlook 2013 or earlier | Outlook 2016 or later with updated connectivity |
You can now add your MFA-protected account to Outlook using an app password. If you upgrade to a newer Outlook version, consider switching to modern authentication for better security. For advanced control, use Windows Credential Manager to view or edit stored app passwords via Control Panel.