Outlook can become stuck in a multi-factor authentication loop, repeatedly prompting for credentials without ever signing in. This occurs when cached sign-in data conflicts with new security policies or server settings. This article explains the root cause and provides steps to clear the cached authentication state and reconfigure Outlook to connect successfully.
Key Takeaways: Breaking the MFA Loop
- Windows Credential Manager: Removing old Outlook and Microsoft Office credentials forces a fresh sign-in.
- Outlook Account Settings > Repair: This tool can automatically fix common authentication and connection problems.
- Windows Security > App & browser control > Reputation-based protection settings: Temporarily disabling this can rule out security software blocking the sign-in.
Why Outlook Gets Trapped in an MFA Loop
The multi-factor authentication loop happens because Outlook holds onto outdated or corrupted authentication tokens. When you try to sign in, Outlook sends an old token to the Microsoft 365 servers. The servers reject this token and request new MFA approval, but Outlook fails to process the new request correctly, creating a cycle.
Common triggers include recent password changes, updates to your organization’s Conditional Access policies, or a corrupted local identity cache. The fix involves clearing all stored credentials related to your Microsoft account and Office applications, then allowing Outlook to establish a new, clean connection.
How Cached Credentials Cause the Loop
Windows and Office store sign-in information in several places, including the Windows Credential Manager and a hidden identity service cache. If the data in one of these locations is out of sync, the authentication flow breaks. You must delete credentials from all these sources to stop the loop.
Steps to Clear Credentials and Fix the MFA Loop
Follow these steps in order. Start by closing Outlook completely.
- Delete credentials from Windows Credential Manager
Open the Windows Start menu, type “Credential Manager,” and select the Control Panel result. Go to Windows Credentials. In the list of Generic Credentials, find and remove any entry containing “MicrosoftOffice” or your account email address. Select each one and click Remove. - Use the Office Account Repair Tool
Open Outlook and go to File > Account Settings > Account Settings. Select your email account and click Repair. Follow the on-screen prompts, which will guide you through a new sign-in process, including MFA approval. This tool often resolves the underlying connection issue. - Clear the Office identity cache via Command Prompt
Close all Office apps. Press Windows Key + R, type “cmd,” and press Ctrl + Shift + Enter to run Command Prompt as administrator. Copy and paste this command:cd %localappdata%\Microsoft\Office\16.0\Wef\and press Enter. Then typedel *.datand press Enter to delete the cached identity files. - Sign out and back into Windows
Restart your computer or sign out of your Windows session completely. Sign back in with your corporate account. This refreshes your primary Windows authentication token, which Outlook relies on. - Re-add your account in Outlook
If the repair tool did not work, remove and re-add the account. Go to File > Account Settings > Account Settings. Select the problematic account, click Remove, and confirm. Then click New to add it again, entering your email address to start the fresh authentication flow.
If Outlook Still Has Issues After the Main Fix
Outlook prompts for MFA on every launch
This indicates a policy setting like “Persistent browser session” is disabled or a browser cookie is being cleared. Check your Microsoft 365 admin center Conditional Access policies. For the user, try signing in via a web browser to office.com, checking the “Stay signed in” box, and completing MFA. Then restart Outlook.
Authentication window appears but instantly closes
Security software or Windows Defender SmartScreen may be blocking the sign-in pop-up. Go to Windows Security > App & browser control. Under “Reputation-based protection,” click “Reputation-based protection settings.” Temporarily turn off “Potentially unwanted app blocking” and try the Outlook sign-in again. Remember to re-enable it afterward.
Error message “Something went wrong and we can’t sign you in”
This often points to a corrupted Office installation. Use the Microsoft Support and Recovery Assistant tool. Download and run it, select Outlook, and choose “I’m having problems with my email account.” The tool will diagnose and attempt to fix deeper installation-level problems.
Manual Account Repair vs. Automated Tools
| Item | Manual Credential Clearance | Microsoft Support and Recovery Assistant |
|---|---|---|
| Primary Use Case | Targeted fix for known cached credential issues | Broad diagnosis for unknown sign-in or connection errors |
| User Control | High – user executes specific commands | Low – automated tool runs tests and applies fixes |
| Speed | Fast if the root cause is cached data | Slower due to comprehensive diagnostic scans |
| Best For | IT professionals or users comfortable with system tools | End-users who need a guided, step-by-step solution |
| Outcome | Clears specific credential stores | May repair Office installation, registry, and credentials |
You can now stop the endless MFA prompts by clearing outdated authentication data. Start with the Credential Manager and the built-in Outlook repair tool. If the loop continues, use the dedicated Microsoft diagnostic utility. For persistent problems, check your organization’s Conditional Access policies in the Microsoft 365 admin portal, as they may require a specific device compliance state.