Outlook 2016 doesn't accept password or app password

I just wanted to share that EWS has officially been announced that it will eventually be end of life as well. Retirement of Exchange Web Services in Exchange Online (microsoft.com)

I filed this feature request, let's all vote on it and hopefully encourage microsoft to give us greater flexibility in our chosen email clients:

https://feedbackportal.microsoft.com/feedback/idea/c36fe0e4-6ed3-ee11-92bd-000d3a7a5824

this is relevant to the person that was using BlackBerry Hub+

Hi StephenDFW - If you have any questions about how your account is setup or if you are having problems with any additioanl prompts, what I would recommend is the following:

1. Remove the outlook.com account from the settings within Outlook on iOS
2. Re-add an account. Outlook will ask you to type the email and it will automatically find the proper setting and set it up to properly sync. You should not have to pick account type. However, if you do for any reason just go ahead and pick Outlook.com since that is where your mailbox is hosted.

Hope that helps

Dave

David/Gabriel,

First of all, I/we appreciate your efforts and help on this. I know you two are taking the brunt of the heat, and the thinking, of the lack of, is/are done by others behind the scene.

In a nutshell, I have a hard time believing the explanation given. I am having/had issues with multiple clients:

1. Latest GMail app for Android
2. Latest Outlook app for Android
3. Latest Outlook as a part of M365 (I added my account to my work Outlook, which is the latest build on the stable channel)
4. Older Outlook version you named

MFA is setup on all my critical accounts, including MS-based accounts. These clients are all very modern and support latest protocols, including OAuth. And if they don't work, I don't know what will.

The fact the issue is already happening to 1, 2 and 3, suggest the issue is tied to the account type and its lack of support for more advanced authentication process to your own liking, more so than the client issue alone. The data point and my personal experiences with this do not align with your assertions, so I don't think it's a matter of moving to a later version, i.e., Outlook 2021. It is possible that your team's constant tweaks of things in the last month created a fog of issues and made it impossible to pinpoint the behavior for us as users.

To your mitigation suggestions:

1. "New Outlook" that is being aggressively pushed right now, is a PWA (for those that don't know, it's like a fancy bookmark for browser website). Accessing non-MS accounts will basically allow Microsoft to be the proxy (for those that don't know, MS will become the middle man, accessing and storing your data from other non-MS platforms that you may have intentionally tried to separate). Microsoft's terms and conditions for the "New Outlook" indicate Microsoft will have rights to use those data. If Microsoft is under brute force attack as you suggested, WHY would any of us trust you to be the proxy of our other data?
2. If some of us are already having issue with the latest Outlook from M365, why would we migrate to Outlook 2021?

Hi Tony_MC - You are not being kicked or forced to get a Microsoft 365 Subscription. If you would like to continue to stay with the same Outlook experience you have been using, you can upgrade to Office 2021 which does support Modern auth against Outlook.com sync. If you don't want to upgrade and just want a free offering, we do have the New Outlook which supports multi account, a free version of Mac Outlook, as well as Outlook for both iOS and Android.

As you mention there are other solutions like Thunderbird that do also support OAuth and can sync your outlook.com mailbox.

You can also continue to use your current setup until Basic Auth is fully deprecated, which we will ensure we give well and ample notice before that happens. However, if you are using that you might see increased authentication prompts as we mentioned due to the increased security settings that we have had to deploy to ensure we are protecting accounts from potential attack.