Create App Password

Question

Hello,

I have Microsoft 365 Business Basic.

Please explain how to create app password because I follow this document and don't see such an option.

Security defaults are enabled and per-user MFA is disabled.

Answer 1

Hi,

Thank you for your thorough answer.

I need to send e-mail from my Django app through SMTP server of my Microsoft 365 account.

So far,

1. Security defaults are disabled.
2. MFA is enabled for my user.
3. The option to allow users to create app passwords is enabled (refer to screenshot I attached to my previous reply).

Now, please tell me where exactly I have to go to create an app password because I can't find it anywhere.

Also, if I need to change/enable anything else to be able to send email from my app (through smtp.office365.com), please let me know.

Thanks.

Answer 2

Hi Omid Shojaee,

Thank you for choosing Microsoft community.

Based on my knowledge, if security defaults are turned on, MFA (multi-factor authentication) is enforced and asks for using only the Microsoft Authenticator app using notifications - which means app password is not applicable. (Methods in MFA mainly include authenticator app, phone call, text message and app password.)

Policies enforced

 

Deployment considerations 

App password is an old way of authentication and is recommended for desktop apps which don't support modern authentication. For Office 2013 clients and later desktop apps which support modern authentication, it's recommended to use two-step authentication (or MFA). And users can always Change your two-step verification method and settings (microsoft.com).

(Since there are an abundant cases regarding the lock of authenticator app, it's recommended that users set up at least 2 verification methods, i.e: authenticator app + text message, in case one of the method becomes unavailable. )

So far as I know, app passwords are usually applied to desktop apps. If most apps for your users are web-based, app passwords might not be necessary. And I've further checked that main apps included in Business Basic are Office apps for the web, that may be the reason @Palcouk said so.

Microsoft 365 Business Basic | Microsoft 365

If you still prefer app passwords as the way for authentication, you may turn off security defaults and maybe enable per-user MFA to check if it's applicable.

Hope it helps! If any update, welcome to share with us.

Thanks & Stay safe,

Qian

Answer 3

I see the option in my Active Directory:

Next time, make sure you know what you are talking about.

Answer 4

Buis Basic is on-line access only