Enable modern authentication for iOS, iPadOS and macOS devices using Apple Mail

Starting December 2022, Microsoft will start disabling Basic authentication for Exchange Active Sync, or EAS, in Exchange Online. Basic authentication is an outdated industry standard that’ll soon be deprecated. Its use makes it easier for attackers to capture user credentials, which increases the risk of those stolen credentials being reused against other endpoints or services.

If you or anyone in your organization uses Apple Mail on an iOS, iPadOS or macOS device, you'll need to take a few steps to enable modern authentication. Modern authentication, or OAuth2.0, is more secure and supports multi-factor authentication, or MFA, with modern methods like one-time text messages and authenticator apps.

Find out what you need to do based on your device:

• I'm using Apple Mail on a Mac computer
• I’m using the Apple Mail app on an iOS or iPadOS device

If you can't follow the steps on your iOS or iPadOS device, troubleshoot common issues:

• I re-entered my password but it's still asking me to do it
• I can't upgrade to the latest iOS or iPadOS version

I'm using Apple Mail on a Mac computer

After Basic authentication for EAS is disabled for your organization, Apple Mail will prompt you re-enter your Microsoft 365 email password. After completing the sign-in process, your device will automatically switch to modern authentication. Your computer must be using macOS version 10.14 or later.

If you aren't prompted to re-enter your password or can't see any of your email, you'll need to remove and then re-add your account from Apple Mail on your computer to enable modern authentication.

1. To remove your email from Apple Mail, open the Mail app on your computer.
2. Go to Mail in the upper-left corner. Select Settings, and then Accounts.
3. Select an account, and then — Remove.
4. To re-add your account, go to Mail. Select Add Account, then Microsoft Exchange, and then enter your account information.
   • If you're asked about your account type, you'll need to choose Work or school, not Personal, to continue.
   • If you need more help with re-adding your account, see our steps for setting up Apple Mail on a Mac.

After successfully removing and re-adding your email account, it’ll automatically start using modern authentication.

I’m using the Apple Mail app on an iOS or iPadOS device

Based on your version of iOS or iPadOS, you'll need to take a few steps to enable modern authentication.

1. On your device, go to the Settings app.
2. Tap General, then About, and then iOS version (On an iPad, after you select About, you might see your iPadOS version listed as Software Version).
3. Based on your version of iOS or iPadOS, select the appropriate tab, and then continue to follow the steps:
   
   
   • iOS or iPadOS version 15.6 or later
   • iOS or iPadOS version 15.5 or earlier

   PreviousNext

   4. After Microsoft disables Basic authentication for EAS in your organization, the Apple Mail app will prompt you to re-enter your Microsoft 365 email password.
   5. Complete the sign-in process using your Microsoft 365 email account.
      • You might be asked to grant some permissions. To continue using your email on your device, select Accept. If you're an admin, select the checkbox next to Consent on behalf of your organization so your other users don't see this prompt.

   4. Upgrade to the latest version of iOS or iPadOS on your device (15.6 or later).
   5. After Microsoft disables Basic authentication for EAS in your organization, the Apple Mail app will prompt you to re-enter your Microsoft 365 email password.
      Note: You might be asked by the Apple Mail app to re-enter your password before upgrading your device to the latest iOS version. However, you need to upgrade to the latest version before your password is accepted.
   6. Complete the sign-in process using your Microsoft 365 email account.
      • You might be asked to grant some permissions. To continue using your email on your device, select Accept. If you're an admin, select the checkbox next to Consent on behalf of your organization so your other users don't see this prompt.

After finishing the sign-in process, your device will automatically start using modern authentication.

I re-entered my password but it's still asking me to do it

If the Apple Mail app keeps asking you re-enter your password, you'll need to go through your device settings.

1. Go to the Settings app on your device.
2. Scroll down. Tap Mail, and then Accounts.
3. Tap your email account, and then select Re-enter Password.
   
4. Enter your password and complete the sign-in process. If you're still asked to re-enter your password, sign in to Outlook on the web to verify that it's correct or reset it.
   • You might be asked to grant some permissions. To continue using your email on your device, select Accept. If you're an admin, select the checkbox next to Consent on behalf of your organization so your other users don't see this prompt.

When you're finished, your device will automatically start using modern authentication.

I can't upgrade to the latest iOS or iPadOS version

If you’re using iOS or iPadOS version 15.5 or earlier and can’t upgrade to the latest version, you need to remove and re-add your email account on your device. Your device must be using iOS version 11 or iPadOS version 13.1 or later to follow these steps.

1. To remove your email, go to the Settings app on your device.
2. Scroll down. Tap Mail, and then Accounts.
3. Tap your email account, then Delete Account, and then Delete from My iPhone or Delete from My iPad. Your email account will be removed from your device.
4. To re-add your email, go to the Settings app on your device.
5. Scroll down. Tap Mail, and then Accounts.
6. Tap Add Account, and then Microsoft Exchange.
7. Enter your Email and a Description, and then tap Next.
8. Enter your Password, and then tap Sign In. (You might need to choose your account type as Work or school, not Personal, to continue.)
9. You might be asked to accept permissions. To continue, tap Accept. If you're an admin, select the checkbox next to Consent on behalf of your organization so your other users don't see this prompt.
10. After your email account's verified, confirm what mail-related data you want to sync with your device.
11. Tap Save. Your account will be re-added to your device.

After successfully removing and re-adding your email account to your device, it’ll automatically start using modern authentication.

More info

• Find out more about deprecation of Basic authentication from Microsoft.
• See how Microsoft is working with Apple to move Apple Mail users to modern authentication.