Are app passwords being discontinued?

Question

I have just seen that modern authentication is going to be required to sync without Outlook soon.[1] Does this change also mean that app passwords[2] will cease to function with Outlook.com POP3/IMAP accounts?

[1] https://support.microsoft.com/en-gb/office/modern-authentication-methods-now-needed-to-continue-syncing-outlook-email-in-non-microsoft-email-apps-c5d65390-9676-4763-b41f-d7986499a90d

[2] https://support.microsoft.com/en-gb/account-billing/how-to-get-and-use-app-passwords-5896ed9b-4263-e681-128a-a6f2979a7944

Answer 1

I still use MSN/Outlook email on my older iPad, and had it set up to use the app passwords as that iPad iOS doesn’t support Authenticator app. This has worked until recently when I got a pop up that I was unable to send a message due to the logon info. When i generated new app password to use, it verified that for the OUTGOING mail server password, but would not accept the same (or other new app password) for the INCOMING mail server, thus mail still does not work. What is the workaround for this situation???

Microsoft cannot just say to use the web login every time we’ve need to access our mail account? Need to have a solution that still works with the older browsers and mail programs that don’t support the 2-factor authentication.

Microsoft has not been very clear with this.

OUTGOING uses SMTP. SMTP authentication still works with App Passwords. INCOMING email to your device uses IMAP or POP. That is where the issue is. Due to security concerns, devices that are using those protocols can no longer use App Passwords. Your options are to use a supported application such as Outlook, or to use the web.

Other devices that send using SMTP will still continue to function with App Passwords. If you want to receive email, you will need an application that can authenticate you correctly.

Answer 2

I still use MSN/Outlook email on my older iPad, and had it set up to use the app passwords as that iPad iOS doesn’t support Authenticator app. This has worked until recently when I got a pop up that I was unable to send a message due to the logon info. When i generated new app password to use, it verified that for the OUTGOING mail server password, but would not accept the same (or other new app password) for the INCOMING mail server, thus mail still does not work. What is the workaround for this situation???

Microsoft cannot just say to use the web login every time we’ve need to access our mail account? Need to have a solution that still works with the older browsers and mail programs that don’t support the 2-factor authentication.

Answer 3

Kokutou,

Is it safe to say for instance, Big Office Copiers (i.e., Kyocera, Xerox, HP, Ricoh MFP's) will still be able to use MFA App Passwords for their SMTP Server for Scan to Email? Some IT companies are already fighting Copier Companies on this (I happen to be on both sides of this) with using App Passwords to begin with.

Thanks,

Bob Timm, WHD |Network Services and Copier Installation Supervisor

Dear  Jonathon Summers1

Thanks for posting in the Microsoft Community

So can you confirm that app passwords, as created using the link pictured below, do fall under the criteria of "Basic Authentication", and will cease to function soon?

 

Yes ，As a Microsoft forum professional staff, I can tell you responsibly that after 9.16, all authentication methods and passwords using imap/POP protocol will be invalid. However, it is only for outlook usage, and does not affect other Microsoft products such as xbox etc.

 

 If you have any questions, please contact us and we will get back to you as soon as possible!

 

Thank you for your understanding and cooperation.

Best regards

Kokutou-MSFT |Microsoft Community Technical Support Specialist

Answer 4

Dear  Jonathon Summers1

Thanks for posting in the Microsoft Community

So can you confirm that app passwords, as created using the link pictured below, do fall under the criteria of "Basic Authentication", and will cease to function soon?

Yes ，As a Microsoft forum professional staff, I can tell you responsibly that after 9.16, all authentication methods and passwords using imap/POP protocol will be invalid. However, it is only for outlook usage, and does not affect other Microsoft products such as xbox etc.

 If you have any questions, please contact us and we will get back to you as soon as possible!

Thank you for your understanding and cooperation.

Best regards

Kokutou-MSFT |Microsoft Community Technical Support Specialist

Answer 5

Dear  Jonathon Summers1

Thanks for posting in the Microsoft Community

Does this change also mean that app passwords[2] will cease to function with Outlook.com POP3/IMAP accounts?

There are some implications, because after 9.16, all three-way mailboxes without the newer validators will not be able to continue to use outlook

Prior to 16 September, users logging into Outlook.com via Basic Authentication may be "prompted to repeat their password to log into their account" in Outlook and other third-party email applications. This is a known issue, and after 16 September, users attempting to connect to their Microsoft account via Basic Authentication will not be able to do so.

Outlook will not sync. - Microsoft Community

Option 1: Get the latest Outlook email application with modern authentication support

Users can purchase a new Outlook licence, use Outlook included in a Microsoft 365 subscription, or download Outlook for Windows for free.

If the user's device does not support the latest Outlook email application, it may be recommended that the user tries to send and receive emails using the web version of Outlook.com.

Option 2: Switch to Outlook.com/Exchange protocol - Instead of using POP/IMAP and SMTP, create a new Outlook profile and add an Outlook.com account using Auto Account Configuration, which will add the account using Modern Authentication!

Please note that presumably from option 2 above, after 16 September, Outlook.com/Hotmail.com/MSN.com/Live.com will only be able to use the Exchange protocol.

 If you have any questions, please contact us and we will get back to you as soon as possible!

Thank you for your understanding and cooperation.

Best regards

Kokutou-MSFT |Microsoft Community Technical Support Specialist