How to use app passwords for legacy apps - Entra ID

Enable and use Microsoft Entra ID Multi-Factor Authentication with legacy applications using app passwords. In this video, JJ Streicher-Bremer will show what app passwords feature is and how to use and when to use it to enable multi-factor authentication for legacy applications.

► Follow us on social:

#MFA #LegacyApps #MicrosoftSecurity

[michaelortega]

This doesnt work no more as Microsoft change this up, i cant even find the app password tab option... thanks MS

[godfathernt]

Thank you very much. This walkthrough finally explained things step by step properly, instead of circle referencing support documents that really only add distraction.

[harrichavan]

I am able to save a lot of time because of these videos.

[phatfossil]

Now what do you do with this password? Where's the rest of the video showing what you do with it??

[jimharberson]

Could you use an app password for a multifunction or another device that needs to email scanned documents?

[doughock]

Very helpful. Thank you for posting this video.

[harshalghogale]

I have one question when one of user trying to save or files in desktop office app word, Excel and PowerPoint He is getting account Error and when we look in the fiddler logs it's shows he is trying to access old tenant SharePoint site and similar this behaviour not happening in the browser only happens in system office apps and even different system same behaviour, how we can fix the issue, The user is migrated user almost 3-4 months ago but this is happening with multiple users

[ColinBroderickMaths]

In order for app passwords to be useful it would be necessary for them to have customisable permissions. Bypassing MFA is a requirement if you do anything remotely sophisticated or automated with your Microsoft account, but most of those things will necessarily store the password in plain text. Thus the only real use of app passwords is completely undermined by introducing a massive security flaw that could be easily managed, but you seem to have chosen not to bother implementing that.

[DelmarPenner]

If anyone has gotten this to work I'd like to know please. I have a half dozen clients suddenly with no access to email on their MS outlook 2013. Works fine on the web but not in Outlook. I followed the instructions on this video as close as I could (some options have changed or moved) But yet it does not work. Keeps popping the password box up every time without fail. Can anyone explain?

[jonathanweiss]

It appears the core value app passwords delivers is generation and storage of a strong credential. I'm a bit confused - is the app password only visible only once upon generation, or is it retrievable after one authenticates via Azure MFA? With the idea being, that once the user is terminated and is no longer enabled in Azure, that they will no longer be able to authenticate via Azure MFA and retrieve the app password?

It seems to me that the value this provides is primarily generation/storage of a strong credential, as it doesn't enable lifecycle management, and does not prevent the credential from being stored elsewhere.

How does Microsoft recommend use of app passwords versus other password management solutions offered, such as the password manager built into Microsoft Authenticator, or the Personal Vault in OneDrive?

[ganeshdalvi]

I have created the app password and use the same password to login into the app but it doesn’t work. I tried everything but the issue doesn’t resolve.

[collyndokoech]

i cant authenticate imap using App password

[Southpaw]

not practical as no information was provided on how to configure legacy app to use app password.

[chingatumadregoogle]

Microsoft really makes it a nightmare to use 2FA.