How to Revoke ActiveSync Mail Client Access for Microsoft Accounts
Question details
The user needs to know how to force an ActiveSync mail client to stop synchronizing emails after updating Microsoft account security settings.

- Product
- ActiveSync / Microsoft Account
- Device & OS
- not provided
- Scenario
- Switching to passwordless authentication or signing out of applications, requiring the termination of an existing mail client session.
- Observed behavior
- The ActiveSync mail app continues sending and receiving emails through an active session despite security credential changes.
Ensure you have access to a web browser and can log in to your Microsoft account's security dashboard to manage active sessions and app passwords.
Revoke the App Password
Use this solution if you previously generated a specific app password for the ActiveSync mail client to bypass two-step verification.
ActiveSync is a stateless protocol, meaning clients may continue to synchronize using existing cached credentials until those credentials or tokens fully expire. Revoking the specific app password immediately cuts off this access.
Log in to your Microsoft account via a web browser and navigate to the 'Security' settings page.
Click on 'Advanced security options' and scroll down to the 'App passwords' section.
Find the password that was generated for your specific mail app, click the 'Revoke' button next to it, and confirm your action.

Change Your Microsoft Account Password
Changing your primary account password forces all connected ActiveSync sessions to request updated credentials.
Review Account Sign-in Activity
Monitor your account to ensure the ActiveSync client has stopped syncing and to identify any suspicious login attempts.
Experience a Seamless Office Suite with WPS Office
While managing email server configurations and ActiveSync protocols requires specific Microsoft account permissions, you can handle all your document, spreadsheet, and presentation needs seamlessly with WPS Office. It provides a lightweight, highly compatible alternative to Microsoft Office without the complicated subscription management.
- 1. Download the Installer: Visit the official WPS Office website and click the free download button for your operating system.
- 2. Install the Software: Run the downloaded installation package and follow the simple on-screen instructions to set up the suite.
- 3. Open Your Documents: Launch WPS Office to instantly start viewing, editing, and saving your Microsoft Office documents without formatting issues.

Frequently Asked Questions
Why does my ActiveSync mail app still work after I change my authentication method?
The ActiveSync protocol is stateless. This means that email clients can continue to synchronize using their existing cached credentials or active tokens until those specific session credentials expire on the server side.
What is an app password in a Microsoft account?
An app password is a randomly generated, single-use password that grants non-browser applications (like older mail clients or ActiveSync apps) permission to access your Microsoft account, effectively bypassing two-step verification.
How do organizational administrators block ActiveSync access for a user?
Administrators can log into Microsoft Entra ID and the Exchange Admin Center to investigate active user sessions, block specific mobile devices, and force a revocation of all active authentication tokens for the affected user.




