Outlook 2016 doesn't accept password or app password

AnotherBug,

I understand what you are saying. In the case of Thunderbird, it offers POP and IMAP. That likely means that Thunderbird may not support EAS with OAuth. That means we are back to trying to get EAS with basic auth working and that is a degraded experience. Please ask the email client provider if they can support EAS with OAuth for Outlook.com. I found there is an EAS add-on for Thunderbird but it must use basic auth because users say it stopped working in late January, Provider for Exchange ActiveSync :: Reviews :: Add-ons for Thunderbird. If you or Rob have not tried this one it might be worth it and to give feedback so the developer will update for EAS with OAuth.

Users that never liked Outlook where using alternative email client even when Outlook 2013 or whatever were a viable option, so?

MS is not forcing anyone to install the new Outlook or buy a subscription, but if you want a free client is there for free.

But if you want to use a MS email account, you need a modern email client that supports OAuth, simple as that.

Also did you know that Google/Gmail will also transition exclusively to OAuth 2.0 September this year?

Then after the transition, if you wan to access your Gmail accounts you will need a client that support OAuth or you will not be able to access your email.

So, Google got this wrong too?

You are wrong. I checked with my contacts at Gmail. They will keep POP3 through app-password even with transition to newer auth method. Google is still allowing those of us that want to use local/offline email clients. In fact, Google has been doing security upgrade gradually, and they managed not to disrupt us like this case has. If I follow their published steps on account setup - things just work.

As far as accessing MS mail through Gmail app, Google is not proxying MS emails. Gmail client has build in Exchange and EAS service/support, so it acts like a real client. If it wasn't for MS' recent changes, it worked fine for years. Just so we are super clear, as far Gmail app is concerned, it does not "cloud cache" non-Google 3rd party emails. All requests from my device's Gmail originates from my device's IP and not from Microsoft Cloud's IP. In addition, Google made it explicitly clear that Google Workspace will not proxy or scan third party data unless the user or IT admin give it consent..

If, just if Google one day decides to do "cloud cache" and proxy non-Google emails, I would equally NOT allow them to access my MS-based emails. I, and I assume most people, would apply this rule equally as well.

What you are doing is conflating OAuth and "cloud caching". OAuth does not technically imply one must use/allow "cloud caching". This is an imposition by MS for whatever reason. One has to ask, why would a company like MS spend millions of dollars hosting additional servers for "cloud caching" if it doesn't have to??? Simple, because it wants access to your non-MS data.

This is from the official Google support "Transition from less secure apps to OAuth" on the Email topic you can read the following:

"Users of stand-alone Microsoft Outlook 2016 or earlier—Move to Microsoft Office 365 (a web-based version of Outlook) or Outlook for Windows or Mac, both of which support OAuth access. Alternatively, you can set up Google Workspace Sync for Microsoft Outlook (GWSMO) for your organization. For details, go to Get ready & install GWSMO.

- Users of Mozilla Thunderbird or another email client—Remove your Google Account, re-add it, and configure it to use IMAP with OAuth. - Users of the mail app on iOS or MacOS or Outlook for Mac—If you use only a password to sign in:- Remove and re-add your Google Account.- Click Sign in with Google to automatically use OAuth."

Also it is stated: "This restriction includes third-party apps that still use basic authentication, such as CalDAV, CardDAV, IMAP, SMTP, and POP, to access Gmail, Google Calendar, and Contacts."

I'm not defending MS or whatever, I agree they can have managed this transition better, but if you really hating their service and business practice so much who is stopping you from fully move to another email provider?

Bedside your "Inside contacts at Google" can you provide a reliable source for your statement?