An app password is a code that gives an app or device permission to access your Office 365 account. This may be the only workable configuration for some older applications and devices. For Android device, you are highly recommended to use the Microsoft Outlook for android app rather than using the native email app with App Password to read email.



Things to Know about App Passwords

  • You should create a separate App Password for each device that uses one.
  • The same App Password can be used for multiple applications on the same device.
  • Once an App Password is created, there is no way to go back and get the value. You must create a new App Password and delete the old one.
  • If an account becomes compromised, it is a standard operating procedure to clear all App Passwords.
  • Never install an App Password on a device you do not have complete control over.
  • If exposed, App Passwords are dangerous as they bypass the account password and MFA. Keep them in a safe place until you have them safely configured on the device.


To create an app password

  1. Open a browser on your computer and sign in to Office 365.
  2. Once logged in, click your profile icon on upper right. Then choose "My account".
    Access O365 My Account setting

  3. From the left panel, choose "Security info". Then click the "+ Add method" on the right.
    Additional security verification

  4. Choose "App Password" and click "Add".
    Create and manage app passwords

  5. When prompted, type a name for your app password, and click "Next".
    Naming for your app password

  6. Then you can copy the app password to clipboard and paste into your application. Click "Done" to close the window. (Note: You cannot retrieve the app password once your close the windows. Otherwise, you need to create a new app password.)
    Naming for your app password



To remove an app password

  1. Open a browser on your computer and sign in to Office 365.
  2. Once logged in, click your profile icon on upper right. Then choose "My account".
    Access O365 My Account setting

  3. From the left panel, choose "Security info".
    Additional security verification

  4. On the right panel, look for the "App password" you want to remove, click the "Delete" on the right to remove it.
    Remove app password

  5. Click "OK" to confirm.
    Confirm delete app password