Microsoft 365 Error Codes

Fix Microsoft 365 Error AADSTS70008 Sign-In and Refresh Token Issues

Maira Mehtab Sep 27, 2026 869 views

Question details

The user is unable to log into Microsoft 365 services due to an AADSTS70008 error, which points to an expired or invalidated refresh token.

Product: Microsoft 365
Device & OS: not provided
Scenario: Signing in to Microsoft 365 applications or attempting to authenticate an account.
Observed behavior: The sign-in process fails and returns the AADSTS70008 error code, blocking access to the Office suite applications due to token inactivity or identity cache issues.

Before you start

Verify that your internet connection is stable and ensure you have your Microsoft account credentials ready, as resolving this issue will require you to re-authenticate.

Solution 1Recommended

Sign Out and Re-authenticate Your Account

The simplest fix for an expired refresh token is to manually sign out of your Office applications and sign back in to generate a fresh token.

Open an Office Application

Launch any Microsoft Office application such as Word or Excel that is currently experiencing the sign-in error.

Sign Out of Your Profile

Click on your profile picture or account name in the top right corner of the application window, then select 'Sign out' from the drop-down menu.

Sign In Again

Restart the application, click 'Sign in', and enter your Microsoft account credentials to authenticate and obtain a new refresh token.

Solution 2

Clear OneAuth and IdentityCache Folders

If standard re-authentication fails, clearing the local identity cache folders can resolve persistent token corruption.

Solution 3

Delete the Office Identity Registry Key

When caching issues persist, removing the identity registry key forces a complete reset of the Office login state.

Free Microsoft Office alternative

Switch to WPS Office for a Hassle-Free Experience

If Microsoft 365 login errors like AADSTS70008 are continually disrupting your workflow, consider switching to WPS Office. It provides a lightweight, free alternative that doesn't rely on complex token authentication for local file editing, while maintaining seamless compatibility with your existing Microsoft documents.

1. Download WPS Office: Visit the official WPS Office website and click the free download button.
2. Install the Software: Run the installer and follow the quick on-screen instructions to set up the suite.
3. Open Your Files Offline: Double-click your existing Microsoft Office files to open and edit them instantly without worrying about login errors.

Highly compatible with Microsoft Word, Excel, and PowerPoint file formats (.docx, .xlsx, .pptx).No complex sign-in tokens or mandatory cloud syncing required for basic offline use.Lightweight installation that runs smoothly on older devices and consumes fewer system resources.Includes an intuitive, all-in-one tabbed interface for managing documents, spreadsheets, and presentations.

microsoft office alternative - wps office

Frequently Asked Questions

What exactly does the AADSTS70008 error code mean?

This error code signifies that the refresh token provided by Microsoft Entra ID (formerly Azure AD) has expired, usually due to a period of inactivity, or because it has been invalidated by your organization's security policies.

Can multifactor authentication (MFA) trigger the AADSTS70008 error?

Yes. If your organization recently enabled or modified multifactor authentication settings, existing authentication tokens may be invalidated. This triggers the error until you sign in again and complete the new MFA prompt.

How can I access my documents if the local Microsoft 365 apps are locked out?

If your desktop applications are inaccessible due to sign-in errors, you can log in to the web version of Microsoft 365 via a browser to view your cloud-saved files, or use an offline alternative like WPS Office to open files stored locally on your hard drive.

Microsoft Office Error Codes