MFA Security Issues

How to Fix Missing App Password Option in Microsoft 365 MFA

Chanuka GeekiyanageChanuka Geekiyanage Oct 28, 2026 868 views

Question details

Users need to create an app password for their account, but the option is not available under their Security info settings.

How to Fix Missing App Password Option in Microsoft 365 MFA
Product
Microsoft 365
Device & OS
not provided
Scenario
Adding a sign-in method after multi-factor authentication (MFA) has been enabled and enforced.
Observed behavior
The App password option does not appear under Security info, preventing users from authenticating legacy applications.
Before you start

Ensure you have Microsoft 365 Global Administrator or Authentication Administrator privileges to access and modify user MFA settings in the admin center.

Solution 1Recommended

Reset MFA Settings for the Affected User

Resetting the user's multifactor authentication configurations can refresh their security state and restore the missing app password option.

In some cases, newly enforced MFA policies may not sync correctly with existing user session data. Forcing a configuration reset and signing the user out of all current sessions can resolve the discrepancy.

1
Navigate to MFA settings

Open the Microsoft 365 admin center and go to the multifactor authentication configuration page.

2
Manage user settings

Select the affected user and click on 'Manage user settings'.

3
Require contact methods and delete passwords

Check the boxes for 'Require selected users to provide contact methods again' and 'Delete all existing app passwords generated by the selected users', then save the changes.

4
Sign out of all sessions

Return to the Microsoft 365 admin center, locate the user's active devices or sessions, and select the option to sign the user out of all Microsoft 365 sessions.

5
Re-enforce MFA

Enforce MFA for the user again. Have the user log in, set up their authentication methods, and check if the 'App password' option now appears under Security info.

Reset MFA Settings for the Affected User
Contact Microsoft Support: If you have tested these steps and the app password option remains unavailable even for newly enabled accounts, you may need to open a support ticket in the Microsoft 365 admin center for further investigation.
Free Microsoft Office alternative

Try WPS Office for a Seamless Productivity Experience

While resolving Microsoft 365 administrative settings, consider WPS Office as a free, lightweight, and hassle-free alternative. It provides a familiar interface and comprehensive features for editing Word, Excel, and PowerPoint files without complex cloud authentication issues.

  1. 1. Download the installer: Visit the official WPS Office website and download the free installer for your operating system.
  2. 2. Install the software: Run the downloaded setup file and follow the simple on-screen instructions to complete the installation.
  3. 3. Open and edit files: Launch WPS Office to immediately start creating, editing, and managing your documents with full Microsoft format compatibility.
Highly compatible with Microsoft Office formats including DOCX, XLSX, and PPTX.Free and lightweight, requiring minimal system resources to run smoothly.Familiar user interface ensuring a zero-learning-curve migration for new users.Offers reliable offline functionality without depending on complex cloud administration.
microsoft office alternative - wps office

Frequently Asked Questions

What are App Passwords in Microsoft 365 used for?

App passwords are randomly generated passwords used to authenticate legacy applications, devices, or older email clients that do not support modern authentication when multi-factor authentication (MFA) is enforced.

Why is the App Password option disabled by default in some tenants?

Modern Microsoft 365 tenants often have 'Security defaults' enabled by Microsoft. Security defaults block legacy authentication protocols, effectively removing the ability and need to use app passwords in favor of modern authentication methods.

Can I enable App Passwords for specific users only?

Yes, administrators can configure MFA settings to allow app passwords on a per-user basis, provided the tenant-level settings (like Conditional Access policies or Security defaults) do not globally block legacy authentication.