OneDrive for Business 0x8004de40 sign-in error troubleshooting for help desk teams: appears after password reset

Help desk teams frequently encounter OneDrive sign-in error 0x8004de40 immediately after a user resets their Microsoft 365 password. This error indicates that the cached credentials stored by OneDrive no longer match the new password, causing the sync client to fail authentication. The issue is not a corruption of the OneDrive application itself but a stale token or credential cache that must be cleared. This article explains the root cause, provides step-by-step fixes for help desk technicians, and covers related failure patterns that may arise after password changes.

Why Error 0x8004de40 Appears After a Password Reset

When a user resets their Microsoft 365 password, the old password is immediately invalidated by Azure Active Directory. However, OneDrive for Business stores encrypted copies of the user’s credentials in Windows Credential Manager as “OneDrive Cached Credential” entries. These cached credentials still contain the old password hash. The OneDrive sync client attempts to authenticate using the stale credentials, and Azure AD rejects the request, returning error code 0x8004de40. This error is not a sign of a broken OneDrive installation or a corrupted profile. It is a predictable authentication failure caused by outdated cached tokens.

The Role of the OAuth Token

OneDrive for Business uses OAuth 2.0 for authentication. When a password changes, the refresh token stored in the credential cache becomes invalid. The sync client cannot obtain a new access token without a valid refresh token. This forces the error code 0x8004de40 to appear in the OneDrive system tray icon. Clearing the cached credentials forces OneDrive to request a new OAuth token from Azure AD using the new password.

Steps to Clear Cached Credentials and Reauthenticate OneDrive

The following procedure removes stale credentials and reconnects OneDrive without reinstalling the client. Perform these steps on the affected user’s Windows 10 or Windows 11 device.

1. Close OneDrive completely
   Right-click the OneDrive cloud icon in the system tray and select Pause syncing. Then right-click the icon again and select Settings. In the Account tab, click Unlink this PC. Confirm the unlink prompt. This removes the current sync relationship and stops all OneDrive processes.
2. Open Windows Credential Manager
   Press Win + R, type control /name Microsoft.CredentialManager, and press Enter. This opens Credential Manager directly.
3. Remove all OneDrive cached credentials
   Click Windows Credentials. Scroll down to the Generic Credentials section. Look for entries that contain “OneDrive Cached Credential” in their name. Click the arrow to expand each entry, then click Remove. Confirm the removal. Repeat for every entry that includes “OneDrive” or “MicrosoftOffice16”.
4. Clear the Office credential cache
   In the same Credential Manager window, locate any entries starting with MicrosoftOffice or Microsoft.AAD.BrokerPlugin. Remove those entries as well. These entries store tokens for other Microsoft 365 apps.
5. Start OneDrive and sign in with the new password
   Open OneDrive from the Start menu or by searching for OneDrive. The client will display the setup screen. Enter the user’s work or school email address. On the sign-in page, enter the new password. OneDrive will re-establish the sync folder and begin downloading files.
6. Verify the sync status
   Wait two to three minutes. Right-click the OneDrive cloud icon and check that the status shows Up to date or shows a sync progress indicator. Open File Explorer and confirm that files in the OneDrive folder are accessible.

If OneDrive Still Has Issues After the Main Fix

In some cases, the error persists even after clearing credentials and unlinking. The following subsections address common residual problems.

OneDrive Shows Error 0x8004de40 After Reauthentication

If the error returns immediately after signing in, the cached credentials may not have been fully removed. Open Credential Manager again and search for any remaining entries containing OneDrive, MicrosoftOffice, or Microsoft.AAD.BrokerPlugin. Remove all of them. Then restart the device before starting OneDrive again.

OneDrive Fails to Start or Opens a Blank Window

A blank OneDrive window after password reset often indicates a corrupt local cache folder. Navigate to %LOCALAPPDATA%\Microsoft\OneDrive and delete the settings folder. Do not delete the entire OneDrive folder. Then restart OneDrive. The client will rebuild the settings folder and prompt for sign-in.

Known Folder Move (KFM) Fails After Password Reset

If the user had Desktop, Documents, or Pictures folders redirected to OneDrive, those folders may appear empty or show sync errors after the password change. After completing the main fix above, open OneDrive settings, go to the Sync and backup tab, and click Manage backup. Confirm that the folder paths are correct. If a folder shows as not backed up, click Start backup for that folder. This re-establishes the Known Folder Move association with the new authentication token.

OneDrive Sign-In Methods: Credential Manager vs Reset vs Reset App

Item	Clear Credential Manager	Unlink and Relink	Reset OneDrive App
Description	Removes cached passwords from Windows Credential Manager	Disconnects the current device from the OneDrive account	Resets the OneDrive sync engine via the Run dialog
When to use	Error 0x8004de40 appears immediately after password reset	User can open OneDrive but cannot sync	OneDrive crashes or fails to open after credential fix
Steps	Open Credential Manager, remove OneDrive entries	OneDrive settings > Account > Unlink this PC	Press Win+R, type %localappdata%\Microsoft\OneDrive\onedrive.exe /reset
Effect on local files	No files are deleted	Local copies remain until relinked	No files are deleted

Help desk technicians can now resolve error 0x8004de40 by clearing cached credentials in Credential Manager and unlinking OneDrive. After reauthentication with the new password, sync should resume normally. For persistent issues, resetting the OneDrive app via the /reset command or deleting the local settings folder may be necessary. As an advanced tip, use the dsregcmd /leave command followed by dsregcmd /join to fully refresh the device’s Azure AD registration if credential issues recur across multiple Microsoft 365 apps.