How to Create an App Password in Microsoft 365

Axio Networks Tip: We recommend using an app password only when absolutely necessary. Modern apps should support modern authentication (MFA), which is more secure. Use app passwords only for older applications or devices that do not support MFA.

What Is an App Password?

An app password is a unique, randomly generated 16-character code that lets you sign in to older apps or devices that don’t support modern multifactor authentication (MFA).
It works like a one-time key: you create it in your Microsoft 365 account and enter it in the app instead of your normal password.

When You Might Need an App Password

• Legacy email apps such as Outlook 2010 or older mobile email clients
• Certain multifunction printers (MFPs) or scanners that send email
• Applications that connect to Microsoft 365 using basic authentication

If your app supports OAuth2 or “modern auth”, use that instead—it’s more secure and easier to manage.

Step-by-Step: Creating an App Password

1. Sign in to Your Microsoft 365 Security Settings

1. Go to https://mysignins.microsoft.com/security-info.
2. Log in with your Microsoft 365 email address and password.
3. Complete your normal MFA verification (text, authenticator app, etc.).

2. Add a New App Password

1. Click Add method.
2. From the drop-down list, choose App password, then click Add.
3. Give the app password a recognizable name—something that identifies which app or device will use it (for example, “Home Scanner”).

3. Copy & Save the Password

• Microsoft will immediately generate a 16-character password (no spaces).
• Copy it now—you won’t be able to view it again after you close the window.
• Enter this password into the app or device in place of your normal Microsoft 365 password.

Managing or Deleting App Passwords

If you ever suspect the password was compromised, or the app/device is no longer in use:

1. Return to https://mysignins.microsoft.com/security-info.
2. Find the app password in the list.
3. Click Delete to immediately revoke access.

Axio Networks Recommendation

App passwords are a last resort. Whenever possible:

• Upgrade legacy software to versions that support modern authentication.
• Use Microsoft Authenticator or hardware security keys for the best protection.

Need help modernizing your environment? Contact Axio Networks—Scottsdale’s award-winning managed IT provider—for expert guidance.