If you use multi-factor authentication, Microsoft app passwords can still linger in your account long after you stop needing them.
This guide explains how to remove Microsoft app passwords and why doing so can improve account security and reduce sign-in confusion.
What Microsoft app passwords are
Microsoft app passwords are 16-character passwords generated for older apps and devices that do not support modern authentication or MFA prompts.
They are commonly used with Outlook desktop clients, older mail apps, scanners, printers, and legacy Microsoft 365 connections.
Because app passwords bypass a second verification step, they should only exist when a specific app or device truly needs them.
If you no longer use that app, removing the password is a practical security step.
Before you remove an app password
Check whether the app or device still needs it.
Some legacy clients stop syncing email, calendars, or contacts when the password is deleted, especially if they have not been updated to support OAuth or modern authentication.
- Confirm the app is still in use.
- Update the app or device if a newer version supports modern authentication.
- Record which device or service uses the password so you can test after removal.
If you are unsure, remove only one app password first and verify that the associated service still works with a modern sign-in method.
How to remove Microsoft app passwords from your account
The exact steps depend on whether your Microsoft account is personal or managed by Microsoft 365.
In both cases, you remove the password from the security settings tied to the account.
Remove app passwords from a personal Microsoft account
- Sign in to your Microsoft account security page.
- Go to the section for advanced security options or additional security verification.
- Find the list of app passwords associated with your account.
- Select the password you want to delete.
- Confirm the removal.
After deletion, the app password no longer works for any app or device that used it.
If the app still tries to sign in, it will usually prompt for the old password and fail until you replace it with a supported sign-in method.
Remove app passwords in Microsoft 365 or work accounts
For Microsoft 365 business, school, or enterprise accounts, app passwords are typically managed through the security info portal or by your organization’s identity settings.
If your tenant allows app passwords, you can usually remove them from the user’s security information page after signing in.
- Open the Microsoft security info or account security portal.
- Choose the app password list or authentication methods section.
- Delete the specific app password you no longer need.
- Sign out and test the related app only if needed.
In many organizations, an administrator can also disable app passwords entirely at the tenant or policy level, especially when modern authentication is enforced.
How to remove Microsoft app passwords in Outlook and Office apps
Outlook, Word, Excel, and other Office apps do not store app passwords as separate account items in the same way your Microsoft account does.
If an older Outlook profile or Office installation is using an app password, you usually remove it by updating the saved credentials or re-signing in.
- Open Windows Credential Manager and look for stored Microsoft or Outlook-related credentials.
- Remove outdated entries tied to the old app password.
- Restart the app and sign in again with modern authentication if supported.
- If the app is legacy, update it or migrate to a newer client.
On macOS, you may need to clear the account from the app, then add it back using the current Microsoft sign-in flow.
This is often more effective than trying to edit the password directly.
What happens after you delete an app password?
Once you remove Microsoft app passwords, any app or device that depended on them will lose access.
That is expected and usually indicates the password was no longer appropriate for the current setup.
Common results include:
- Email sync stops on an older phone or mail client.
- Scanner or printer scan-to-email features fail until reconfigured.
- Outlook prompts for credentials again.
- Legacy applications cannot connect until updated.
If the device or app is important, replace the app password with a modern authentication method, app-specific OAuth support, or a newer version of the software.
How to replace app passwords with stronger sign-in methods
Microsoft strongly favors modern authentication, which uses MFA, token-based sign-in, and centralized access controls.
Replacing app passwords improves security because the app never receives a reusable password that can be copied or reused elsewhere.
Better alternatives include:
- Using the latest version of Outlook or Microsoft 365 apps.
- Enabling modern authentication for supported mail clients.
- Using Microsoft Authenticator for MFA prompts.
- Configuring app permissions through Azure AD or Microsoft Entra ID policies.
- Using service-specific connectors for devices like printers and scanners.
If your organization still needs app passwords for a particular workflow, consider limiting their use to only those systems that cannot be upgraded immediately.
How to tell if an app password is still active?
Microsoft account security pages typically show all currently created app passwords, unless they have been deleted or expired by policy.
If you see one in the list, it is still active for authentication.
If you no longer see it but an app still appears to work, the app may be using cached tokens, a separate account, or another authentication method.
To confirm, sign out of the app or remove its saved credentials, then test sign-in again.
Common problems when removing app passwords
Some users remove a password and later discover that an old device is still in production.
That is why it helps to inventory the apps and hardware tied to each password before deletion.
The app stops working immediately
This usually means the app was still dependent on the deleted password.
Recreate access only if the app cannot be upgraded, and then plan a migration away from it.
You cannot find the app password list
Your account may not have any app passwords, or your organization may have disabled the feature.
In managed Microsoft 365 environments, security policies can hide or block app password creation altogether.
Outlook keeps asking for credentials
Clear saved credentials, update Outlook, and verify that modern authentication is enabled.
If the profile is old, creating a fresh Outlook profile often resolves repeated prompts.
When to delete all app passwords at once
If you have fully moved to modern authentication across your Microsoft account or Microsoft 365 tenant, removing every app password is the cleanest option.
This is common after device upgrades, tenant security hardening, or MFA enforcement projects.
- No legacy mail clients remain in use.
- All devices support modern authentication.
- Your admin policy blocks password-based app access.
- Security requirements favor MFA everywhere.
Deleting all unused app passwords reduces risk and makes it easier to manage the devices and services that still need access.