Conditional Access Problems

Fix Microsoft Outlook Requiring Two-Factor Authentication at Every Sign-In

Chanuka Geekiyanage Oct 14, 2026 869 views

Question details

The user is experiencing repeated two-factor authentication (2FA) prompts at every sign-in in Microsoft Outlook, even after selecting the option to remember the device for 30 days.

Why Microsoft Outlook Requires Two-Factor Authentication at Every Sign-In

Product: Microsoft Outlook
Device & OS: not provided
Scenario: Signing into Microsoft Outlook with a work or organizational account.
Observed behavior: Outlook ignores the "remember me for 30 days" selection and forces a new multifactor authentication code entry upon every login attempt.

Before you start

Ensure you have your secondary authentication device (such as a smartphone with your authenticator app) readily available. Do not attempt to bypass these prompts by disabling your multifactor authentication, as this can severely compromise your account's security.

Solution 1Recommended

Review Organizational Security Policies with Your Administrator

Organizational conditional access policies or session controls often override local "remember me" settings, requiring an IT administrator to review your account.

If you are using an organizational or school account, your IT administrator sets strict policies that enforce multifactor authentication (MFA). Saving a password or checking the "remember me" box does not bypass these server-side security rules.

The administrator needs to review the account's sign-in risk, session policies, and Conditional Access settings to determine if a global policy is enforcing the repeated verification.

Gather sign-in details

Take note of the exact times, network conditions (like VPN usage), and devices where you are being repeatedly prompted for authentication.

Contact IT support

Reach out to your organization's Microsoft 365 administrator or IT helpdesk department.

Request policy review

Ask them to review your account's authentication methods, session controls, and Conditional Access policies to see if an organization-wide policy is forcing the repeated verification.

Review Organizational Security Policies with Your Administrator

Security Warning: Do not attempt to disable multifactor authentication yourself, as this violates most organizational security policies and leaves your account vulnerable to unauthorized access.

Solution 2

Clear Cached Credentials and Browser Data

Outdated or corrupted login tokens can cause Outlook to fail to remember your two-factor authentication status.

Free Microsoft Office alternative

Boost Your Productivity with WPS Office

While your IT team resolves your Outlook authentication policies, consider WPS Office as a lightweight, highly compatible alternative for your document, spreadsheet, and presentation needs. It is completely free and works seamlessly with all Microsoft Office file formats.

Fully compatible with Microsoft Word, Excel, and PowerPoint file formats.Lightweight application that consumes minimal system resources.Familiar user interface for a seamless transition without a learning curve.Built-in PDF editing tools for comprehensive document management.

microsoft office alternative - wps office

Frequently Asked Questions

Why does checking "Don't ask again for 30 days" not work in Outlook?

This option is a local convenience feature. If your organization's Microsoft 365 administrator has configured strict Conditional Access policies or short-lived session controls, these server-side security rules will override your local choice and force a 2FA prompt anyway.

Can I disable multi-factor authentication to stop the prompts?

It is highly discouraged to disable MFA. For work or school accounts, you typically do not have the permission to disable it yourself. Disabling MFA significantly increases the risk of your account being compromised by malicious attacks.

Does signing out of Outlook manually trigger a new 2FA prompt?

Yes. If you manually sign out of the Outlook application or Outlook on the web, your active secure session token is destroyed. The next time you sign in, the system will require you to authenticate with 2FA again to verify your identity.

Can a VPN connection cause repeated 2FA requests in Outlook?

Yes. Conditional Access policies continuously monitor sign-in locations and IP addresses. If you frequently connect and disconnect from a VPN, Microsoft 365 detects this as a change in location (a potential sign-in risk) and may prompt for 2FA to ensure the login attempt is legitimate.

Microsoft Office Security Issues