Manage app passwords for two-step verification

Important

Your administrator may not allow you to use app passwords. If you don't see App passwords as an option, they're not available in your organization.

When using app passwords, it's important to remember:

  • App passwords are autogenerated, and should be created and entered once per app.

  • There's a limit of 40 passwords per user. If you try to create one after that limit, you'll be prompted to delete an existing password before being allowed to create the new one.

    Note

    Office 2013 clients (including Outlook) support new authentication protocols and can be used with two-step verification. This support means that after two-step verification is turned on, you'll no longer need app passwords for Office 2013 clients. For more info, see the How modern authentication works for Office 2013 and Office 2016 client apps article.

Create new app passwords

During your initial two-factor verification registration process, you're provided with a single app password. If you require more than one, you'll have to create them yourself. You can create app passwords from multiple areas, depending on how two-factor verification is set up in your organization. For more information about registering to use two-factor verification with your work or school account, see Overview for two-factor verification and your work or school account and its related articles.

Where to create and delete your app passwords

You can create and delete app passwords, based on how you use two-factor verification:

Create and delete app passwords from the Additional security verification page

You can create and delete app passwords from the Additional security verification page for your work or school account.

  1. Sign in to the Additional security verification page, and then select App passwords.

    App passwords page, with the App passwords tab highlighted

  2. Select Create, type the name of the app that requires the app password, and then select Next.

    Create app passwords page, with name of app that needs password

  3. Copy the password from the Your app password page, and then select Close.

    Your app password page with the password for your specified app

  4. On the App passwords page, make sure your app is listed.

    App passwords page, with new app shown in list

  5. Open the app you created the app password for (for example, Outlook 2010), and then paste the app password when asked for it. You should only have to do this once per app.

To delete an app password using the App passwords page

  1. On the App passwords page, select Delete next to the app password you want to delete.

    Screenshot that shows deleting an app password on the App passwords page

  2. Select Yes to confirm you want to delete the password, and then select Close.

    The app password is successfully deleted.

Create and delete app passwords using the Office 365 portal

If you use two-step verification with your work or school account and your Microsoft 365 apps, you can create and delete your app passwords using the Office 365 portal.

To create app passwords using the Office 365 portal

  1. Sign in to your work or school account, go to the My account page, and select Security info.

    Office portal showing Security info tab

  2. Select Add method, choose App password from the dropdown list, and then click Add.

    Security info page, with the Add a method drowpdown list

  3. Enter a name for the app password, and then select Next.

    Create app passwords page, with name of the app password

  4. Copy the password from the App password page, and then select Done.

    App password page with the new app password you created

  5. On the Security info page, make sure your app password is listed.

    Security info page, with new app password shown in list

  6. Open the app you created the app password for (for example, Outlook 2016), and then paste the app password when asked for it. You should only have to do this once per app.

To delete app passwords using the Security info page

  1. On the Security info page, select Delete next to the app password you want to delete.

    Screenshot that shows deleting an app password on the Security info page

  2. Select Ok in the confirmation box.

    The app password is successfully deleted.

If your app passwords aren't working properly

Make sure you typed your password correctly. If you're sure you entered your password correctly, you can try to sign in again and create a new app password. If neither of those options fix your problem, contact your organization's Help desk so they can delete your existing app passwords, letting you create brand-new ones.

Next steps