Fix Outlook Authentication with Office 365 Fails

If Outlook fails to authenticate with Office 365, the fix usually involves updating your sign-in method to Modern Authentication, clearing cached credentials, or repairing the Outlook profile. Below are the exact steps to resolve the most common causes, plus background on why this happens and how to prevent it.

Why Outlook Authentication Fails

Outlook connects to Office 365 using either Basic Authentication (username and password) or Modern Authentication (OAuth 2.0 with multi-factor authentication). Microsoft has been disabling Basic Auth for Exchange Online because it is less secure and more vulnerable to password attacks. When authentication fails, it is often because Outlook is still trying to use Basic Auth, or because the cached credentials are outdated.

Other common triggers include: incorrect password, expired multi-factor authentication (MFA) session, system clock out of sync, corrupt Outlook profile, or a misconfigured DNS/network that blocks the authentication endpoint. The error messages vary—”Need password”, “The connection to Microsoft Exchange is unavailable”, or “Your credentials did not work”—but the fixes below cover most scenarios.

Step 1: Enable Modern Authentication in Office 365

Modern Authentication is the default for most tenants, but if your organization has legacy settings, it may be disabled. To check and enable it:

1. Sign in to the Microsoft 365 admin center (admin.microsoft.com) with an admin account.
2. Go to Settings > Org settings > Modern authentication.
3. Ensure the toggle for Modern authentication is turned on.
4. If it was off, turn it on and wait a few minutes for the change to propagate.

On the client side, Outlook 2016 or later uses Modern Authentication by default. If you are using an older Outlook version (2013 or earlier), you may need to enable it via registry keys. Microsoft provides a support article for this, but the simplest solution is to upgrade to a supported Outlook version.

Step 2: Clear Cached Credentials

Outlook stores your password in Windows Credential Manager. If the password changed or the account was migrated, the old cached credentials can cause repeated authentication failures. To clear them:

1. Close Outlook.
2. Open Control Panel > User Accounts > Credential Manager.
3. Click Windows Credentials.
4. Look for entries that start with MicrosoftOffice16_Data:SSO or OUTLOOK.EXE.
5. Remove those entries (click the arrow and select Remove).
6. Restart Outlook and sign in again.

If you are on a Mac, clear the keychain entries for Outlook by opening Keychain Access, searching for “Outlook”, and deleting the relevant items.

Step 3: Repair or Recreate the Outlook Profile

A corrupt profile can cause authentication to fail even with correct credentials. To repair it:

1. Open Control Panel > Mail (or search for “Mail” in the Start menu).
2. Click Show Profiles.
3. Select your profile and click Properties > Email Accounts.
4. Select the Exchange account and click Repair. Follow the prompts.
5. If repair does not work, create a new profile: in the same window, click Add, enter a new name, and set up the account again.

Recreating a profile is a common fix because it forces Outlook to re-authenticate from scratch. You can later delete the old profile.

Step 4: Check System Clock and Network

Authentication fails if your computer’s time is more than a few minutes off from the server’s time, because the tokens used in Modern Authentication are time-sensitive. To fix:

• Right-click the clock in the taskbar and select Adjust date/time.
• Turn on Set time automatically and Set time zone automatically.
• If that does not help, manually set the time to the correct local time and then re-enable automatic sync.

Network issues can also block authentication. Try connecting to a different network (e.g., phone hotspot) to see if the problem is firewall or proxy related. If you are on a corporate network, check with your IT team about required endpoints—Microsoft publishes a list of Office 365 URLs and IP ranges that must be reachable.

Step 5: Use the Microsoft Support and Recovery Assistant

Microsoft provides a free tool called Microsoft Support and Recovery Assistant (SaRA) that can diagnose and fix many Outlook authentication issues automatically. Download it from Microsoft’s official site, run it, and select Outlook > I’m having trouble signing in. It will test your credentials, check the service health, and apply fixes like resetting the sign-in state.

This tool is particularly useful if you are not comfortable editing registry keys or creating profiles manually.

Frequently Asked Questions

Why does Outlook keep asking for my password even though it is correct?

This usually happens when Modern Authentication is enabled but the cached credentials are stale, or when the account requires MFA and the session has expired. Clear the cached credentials as described above, and ensure you complete the MFA prompt within the allowed time. If the issue persists, check if your organization has a Conditional Access policy that requires specific conditions (like a compliant device) that your computer does not meet.

Will disabling Basic Authentication affect my Outlook?

Yes, if Basic Auth is disabled for your tenant, Outlook must use Modern Authentication. Older Outlook versions (2013 or earlier) do not support Modern Authentication, so they will fail to connect. Upgrade to Outlook 2016 or later, or use the new Outlook for Windows (which is free) to avoid this issue.

Can I fix this without admin rights?

Most client-side fixes (clearing credentials, repairing profile, checking clock) do not require admin rights. However, enabling Modern Authentication in the tenant does require admin. If you are a regular user and the problem is tenant-side, contact your IT administrator.

What is the difference between Basic and Modern Authentication?

Basic Authentication sends your username and password with every request, which is less secure and does not support MFA. Modern Authentication uses OAuth 2.0, which issues short-lived tokens and supports multi-factor authentication, conditional access, and single sign-on. Microsoft has been disabling Basic Auth for Exchange Online to improve security.

Why does authentication work on my phone but not on my computer?

This often indicates that your computer is using an outdated Outlook version or has a corrupt profile. It could also be a network issue—your phone might be on a different network that allows the authentication endpoints. Try the steps above, especially repairing the profile and checking the system clock.

Is there a way to test if my account is locked?

Yes, try signing in to the Outlook on the web (outlook.office.com) with the same credentials. If that works, your account is not locked. If it fails, your password may be wrong or the account is locked—contact your IT admin to unlock it.

Related

• Check if Windows Uses UEFI or Legacy BIOS
• Add Location to World Clock on iPhone
• Fix OneDrive Error 0x80049d61: Step-by-Step