Fix Office 365 Sign-in Issues After an Outlook Phishing Attack
Question details
Users are unable to authenticate Microsoft 365 desktop applications with their business account after experiencing a phishing incident and changing their password, despite online web sign-in working correctly.
- Product
- Microsoft 365, Outlook
- Device & OS
- not provided
- Scenario
- Attempting to sign in and validate a legitimate Microsoft 365 Business Standard desktop installation after an account security compromise and password reset.
- Observed behavior
- Desktop applications fail authentication, show warning icons, or display script errors when signing in with the business account, whereas personal accounts or online web access function normally.
Ensure your computer has been thoroughly scanned by an updated antivirus program to confirm no local malware exists before attempting to reset your credentials or sign in again.
Clear Cached Windows Credentials and Re-authenticate
Clearing old passwords stored in the Windows Credential Manager forces Office to request your newly updated credentials.
When you change your password after a phishing attack, the desktop applications may still attempt to use the old, saved tokens. Removing these cached credentials resolves authentication conflicts.
Click the Windows Start button, type 'Credential Manager' into the search bar, and press Enter.
Select 'Windows Credentials' and scroll down to 'Generic Credentials'. Look for any entries starting with 'MicrosoftOffice16'. Click on them and select 'Remove'.
Restart your computer, open a desktop app like Word or Excel, and sign in again with your updated business account email and new password.
Verify Your Microsoft 365 Subscription License
Confirm that your compromised business account still holds an active license for desktop applications.
Contact Your IT Administrator for Account Review
If self-troubleshooting fails, your organization's IT admin may need to reset sign-in sessions or investigate security blocks triggered by the phishing attack.
Use WPS Office as a Reliable Alternative During Authentication Issues
When Microsoft 365 desktop applications are locked out due to account security issues, credential conflicts, or subscription errors, WPS Office provides a lightweight, fully compatible, and free alternative to keep your workflow uninterrupted without complex login requirements.
- 1. Download and Install: Download the free WPS Office suite from the official website and install it on your computer.
- 2. Open Your Documents: Right-click your existing Microsoft Office files and choose to open them with WPS Office to continue editing immediately.
Frequently Asked Questions
Why can I sign in to Microsoft 365 online but not on the desktop apps?
Desktop applications often rely on cached credentials or local security tokens. A password change might not immediately sync with local apps, causing a mismatch that prevents authentication, whereas web browsers create a fresh login session.
Will a phishing attack compromise my local computer?
Not necessarily. If only your email account credentials were stolen through a fake login page, your local machine might remain uninfected. However, running an in-depth antivirus scan is always highly recommended after a security incident.
Can I still edit my documents if my business account is blocked?
Yes. You can use a personal Microsoft account if you have one, or you can switch to a highly compatible free alternative like WPS Office to edit your local files without business account validation.
How do I fix Outlook script errors during sign-in?
Script errors usually occur when the authentication window cannot load properly. Clearing your Internet Explorer/Edge browser cache, updating Windows, and clearing your Windows Credential Manager will generally resolve these popup script errors.
