What “trusted devices” means in Outlook
If you use Outlook on multiple phones, laptops, tablets, or browsers, Microsoft may remember some of those devices as trusted.
That can make sign-ins faster and reduce repeated verification prompts, but it also means forgotten devices can stay linked to your account longer than you expect.
This guide explains how to remove old trusted devices from Outlook, where those device records live in Microsoft account and Microsoft 365 settings, and what to do if a removed device still appears active.
It also covers the security impact of stale devices so you can clean up access without disrupting current mail use.
Where Outlook stores trusted device access
Outlook itself is part of a broader Microsoft identity ecosystem.
When you sign in, trust is often managed through your Microsoft account, Entra ID, or Microsoft 365 sign-in sessions rather than only inside the Outlook app.
- Microsoft account devices: consumer accounts tied to Outlook.com, Hotmail, and Live.com.
- Microsoft Entra ID / work or school accounts: business and enterprise identities used with Microsoft 365.
- App and browser sessions: local tokens stored on a device that can remain valid until revoked or expired.
- Authenticator-based trust: push approvals, number matching, or remembered MFA sessions that may persist on older hardware.
Because of this, removing a device from Outlook usually means removing its sign-in trust from the underlying Microsoft account or admin portal.
How to remove old trusted devices from Outlook on a Microsoft account
If you use a personal Outlook.com, Hotmail, or Live account, the fastest way to remove an old trusted device is through your Microsoft account device list.
- Open your Microsoft account security page in a browser.
- Sign in with the account connected to Outlook.
- Go to the section for devices or security devices.
- Review the list for old phones, tablets, and laptops you no longer use.
- Select the device you want to remove and confirm the deletion or unlink action.
After removal, that device should no longer be considered trusted for future sign-ins.
If the device still has your Outlook profile signed in locally, the account token may continue working until it is signed out, the app is reinstalled, or cached credentials expire.
Also sign out of the device itself
For better security, remove the device from your Microsoft account and then sign out of Outlook on the device if you still have access to it.
On phones and tablets, delete the account from the mail app or uninstall Outlook entirely.
On PCs, remove the account from the Outlook profile or Windows mail settings if the device is still in use.
How to remove trusted devices in Microsoft 365 for work or school
Work and school accounts are often controlled by Microsoft Entra ID, which may display devices in a company-managed list.
The exact steps depend on whether you are a user or an administrator.
If you are a user
- Open the Microsoft 365 or company account portal.
- Check the device or security settings area.
- Remove personal devices that are no longer used, if your organization allows self-service removal.
- Sign out of Outlook and Microsoft 365 apps on the old device.
If you are an administrator
- Go to the Microsoft Entra admin center.
- Review registered and joined devices.
- Identify inactive or retired endpoints.
- Disable or delete device objects according to your organization’s retention and compliance policy.
In managed environments, removing a device may also affect access to Teams, OneDrive, SharePoint, and other Microsoft 365 services, because the same identity and device trust are often shared across the stack.
How to remove saved Outlook sessions from a browser
If the old trusted device is actually a browser profile or shared computer, removing the device from the account may not be enough.
Outlook on the web can stay signed in through cookies and session tokens.
- Sign out of Outlook on the web.
- Clear browser cookies and cached site data for Microsoft domains.
- Remove stored passwords from the browser if they are saved.
- Close all browser windows before signing in again.
This is especially important on shared or public computers, where the browser may keep a session alive even after the device list is updated.
How to check whether a device is still trusted
If you are unsure whether an old device still has access, review recent sign-ins and active sessions.
Microsoft account security pages and Microsoft Entra sign-in logs can show recent authentication attempts, device names, browser types, and locations.
Look for these signs that a device may still be active:
- Outlook opens without asking for a new verification step.
- Push notifications still reach an old phone.
- Recent sign-in activity lists a device name you do not recognize.
- The device continues syncing mail after you thought it was removed.
When in doubt, revoke access, change the password, and reauthenticate only the devices you still use.
What to do if the old device is lost, sold, or stolen
A lost device should be treated as a security incident, even if it is old.
If Outlook or a Microsoft account was signed in on that device, remove it immediately.
- Change the Microsoft account password.
- Remove the device from your Microsoft account or Entra device list.
- Sign out of all active sessions if the account portal offers that option.
- Review recovery email addresses and phone numbers.
- Check mailbox rules, forwarding settings, and delegated access for suspicious changes.
If the device contained the Outlook app with cached mail, contacts, or calendar data, the account cleanup reduces future access but may not erase data already stored locally.
A remote wipe feature, if enabled by your organization or mobile management tool, offers stronger protection.
Best practices for keeping Outlook device trust clean
Old trusted devices accumulate quietly, especially when you upgrade phones or replace laptops.
A simple cleanup routine can reduce risk and make account recovery easier.
- Review devices every few months.
- Remove devices immediately after replacement or resale.
- Use multi-factor authentication with Microsoft Authenticator or a comparable method.
- Avoid trusting shared computers.
- Keep recovery methods current so you can regain access without relying on old devices.
For organizations, combine device reviews with conditional access policies, compliant device checks, and sign-in risk monitoring.
These controls help ensure Outlook access is granted only to devices that meet current security standards.
Common issues after removing a trusted device
After you remove an old trusted device, you may notice extra verification prompts or temporary sync delays.
That is usually normal because Microsoft is re-establishing trust for the devices you still use.
- More MFA prompts: expected after a trust reset.
- Outlook mobile sign-out: the app may ask you to log in again.
- Sync delay: mail and calendar can take a short time to resync.
- Device still appears for a while: some portals refresh slowly or show cached metadata.
If a removed device continues to receive mail, make sure you are looking at the correct account, then revoke sessions again and verify that the Outlook profile was deleted from the device.
When you should use admin help
If you cannot find the device, if the account is managed by an employer, or if sign-ins keep reappearing from a stale endpoint, a Microsoft 365 administrator may need to intervene.
Admins can inspect device registration, revoke refresh tokens, reset MFA methods, and apply compliance policies that the end user cannot change.
That is especially useful when the account is tied to sensitive business mail, shared mailboxes, or executive calendars where unauthorized device access has a larger operational impact.