Clear the cached Microsoft 365 credentials and re-register the school account in Windows, because this is the documented resolution for error 657rx, “credential is invalid,” sub-status 6008, across Office desktop applications.^1^
Clear and reconnect the school account
These instructions apply to Windows:
- Sign out of Teams, Excel, Outlook, and every other Office application, then close them completely.
- Open File Explorer, enter this path in the address bar, and press Enter:
%localappdata%\Packages\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy
- Delete the files and folders inside that folder.
- Open Settings → Accounts → Access work or school.
- Select the school account and choose Disconnect.
- If this is a school-managed computer, ask school IT before disconnecting it because the account may be used for device management.
- Select Connect and sign in again with the school account to re-register it.
- Open Control Panel → User Accounts → Credential Manager.
- Check both Windows Credentials and Generic Credentials. Remove entries associated with the affected school or Microsoft 365 account.
- Restart Windows, open one Office application, and sign in with the school account.^2^
If error 657rx remains
On Windows 10 version 1703 or later with Microsoft 365 version 1807 or later, repair the Microsoft Entra Web Account Manager (WAM) plug-in:
- Right-click Start and open Windows PowerShell (Admin).
- Run:
if (-not (Get-AppxPackage Microsoft.AAD.BrokerPlugin)) {
Add-AppxPackage -Register `
"$env:windir\SystemApps\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\Appxmanifest.xml" `
-DisableDevelopmentMode -ForceApplicationShutdown
}
Get-AppxPackage Microsoft.AAD.BrokerPlugin
- If the command completes without errors and returns package information, restart the computer and test Excel or Teams again. Microsoft documents this repair for organizational-account authentication failures caused by missing sign-in package information.^3^
Separate a device problem from a school-account problem
Try signing in to Microsoft 365 through a browser:
- Browser works, but desktop apps fail: the account itself is active; continue with the device-local steps above. If necessary, run the Microsoft 365 sign-in troubleshooter by opening Get Help, searching for sign in to Microsoft Office, and following its prompts.^4^
- Browser sign-in also fails: contact the school’s Microsoft 365 administrator. Ask them to verify the account is enabled, reset the password if necessary, and check its Microsoft 365 license and sign-in policies. For a forgotten or rejected school-account password, Microsoft directs non-administrators to their administrator or the work/school self-service password reset process.^5^
When contacting school IT, provide 657rx, sub-status 6008, code 2148073520, and the timestamp—but do not post your email address, tenant ID, correlation ID, or other account identifiers publicly.
References
- how to fix Correlation Id: ff5acba3-3720-4627-9cc9-8a1c1e4521e2 - Microsoft Q&A
- something went wrong. [657rx] - Microsoft Q&A
- Fix authentication issues in Microsoft 365 apps when you try to connect to a Microsoft 365 service
- Access work or school troubleshooter for restoring access to M365 desktop applications | Microsoft Support
- Forgot password to sign in to Microsoft 365, Intune, or Azure