App Passwords for sign in. Does Microsoft still allow these??? or have they been Deprecated??

Hi Jeff, 

Hello and good day. Thank you for reaching out! I am Badry, a Microsoft user like you. I am trying to help you.

Please know that Microsoft has decided to disable the Basic authentication for all email protocols except for SMTP it will be deprecated on September 2025 https://learn.microsoft.com/en-us/exchange/clients-and-mobile-in-exchange-online/deprecation-of-basic-authentication-exchange-online#impact-to-messaging-protocols-and-existing-applications 

Kindly try the following troubleshooting steps below to help resolve this problem: 

-To use or create app password you will need to enforce the MFA for the user firstly then the App password option will appear. To do do here are the steps:
-Go to MS 365 Admin Center >> Clico on users >> active users >> click on one user **** > go to Multifactor Authentication >> on the new page select the accounts which should have app password >> then enable MFA and then enforce

-With the account sign into office.com and go to my account and then security info and create the app password😉

Hope this helps! Give back to the community, help the next person who has this problem by indicating if this answer solved your problem. Click Yes or No below!

Yours Badry,

I am in need of an app password for my Microsoft 365 account I have that I bought through GoDaddy, but when I go to set it up I do not have the option to set up app password. can you give me some guidance on how to do this. and yes I already have the authentication app set up for the account

Hello JeffDAM**,**

Good day! Thank you for reaching out to Microsoft community.

The deprecation, which is mentioned this article, is not for business users.

Modern Authentication Methods now needed to continue syncing Outlook Email in non-Microsoft email apps - Microsoft Support.

For business users, to Allow users to create app passwords:

By default, users can't create app passwords. The app passwords feature must be enabled before users can use them. To give users the ability to create app passwords, admin needs to complete the following steps:

1. Sign in to the Microsoft Entra admin center as at least an Authentication Policy Administrator.
2. Browse to Conditional Access > Named locations.
3. Click on "Configure MFA trusted IPs" in the bar across the top of the Conditional Access | Named Locations window.
4. On the Multifactor authentication page, select the Allow users to create app passwords to sign in to non-browser apps option.

For your reference: Configure app passwords for Microsoft Entra multifactor authentication - Microsoft Entra ID | Microsoft Learn.

Please note that:

• App passwords don't work for accounts that are required to use modern authentication.
• App passwords don't work in hybrid environments where clients communicate with both on-premises and cloud auto-discover endpoints. Domain passwords are required to authenticate on-premises. App passwords are required to authenticate with the cloud.
• When you disable the ability for users to create app passwords, existing app passwords continue to work. However, users can't manage or delete those existing app passwords once you disable this ability.
• When you disable the ability to create app passwords, it's also recommended to create a Conditional Access policy to disable the use of legacy authentication. This approach prevents existing app passwords from working and forces the use of modern authentication methods.

However, there is another specific channel for your mentioned concern where you will get some possible information for certain specific resources and platform from our related community members.

I understand your concern but since your problem is related to Microsoft Entra, I would also like to suggest you post your concern in the related community i.e., Ask a question - **** Microsoft Entra ID - Microsoft Q&A to get the detailed help from the experts.

[Note: A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory].

For more information, you may also check this MS article: Microsoft Authenticator FAQs - Microsoft Support.

Apologies for redirecting you to different community as the members in the category posted focus on the users with out of the box concerns on Microsoft 365 and have limited knowledge on the Microsoft Entra; so, to get the fast and better assistance, we have redirected you in the correct path.

I hope this helps. Let me know if you have any further questions or concerns.

Appreciate your patience and understanding. Have a great day!!

Best Regards,

S M Nazmun Nur

I don't have MS 365 or use Outlook. What can I do? Save everything to Edge somehow?

Thanks,

Barry

Thanks for the info,

Is per-user multifactor authentication supported with either Security Defaults or Conditional Access policies?