Outlook keeps asking for your password, shows "Need Password" or loops on the Microsoft 365 sign-in box? Here's why it happens and how to fix it for good.
You type your password, the box disappears, and a minute later it's back. Outlook's status bar says "Need Password", or you see a "Windows Security" or "Sign in to your account" prompt asking for your Microsoft 365 credentials again and again. Sometimes it accepts the password and still keeps asking. Meanwhile, email isn't arriving and you can't get on with your day.
This is one of the most common Microsoft 365 problems in small offices. It's almost always caused by stale saved credentials, a broken sign-in component in Windows, or a security policy that's doing exactly what it was told. Here's how to work through it.
Quick answer
Close Outlook, remove the saved Office and Outlook entries from Windows Credential Manager, then sign out and back in under File > Office Account. If the loop continues, check the account under Settings > Accounts > Access work or school and create a new Outlook profile. If several people are affected, your admin should check the Entra sign-in logs for a Conditional Access or MFA reason.
Why This Happens
Modern Outlook doesn't really use your password directly. It signs in with modern authentication, gets a token from Microsoft Entra ID (formerly Azure AD), and uses that token until it expires. On Windows, a component called the Web Account Manager (WAM) handles those tokens for all your Microsoft 365 apps.
The loop starts when that chain breaks. Common causes are:
- A recently changed password, with the old one still cached in Windows Credential Manager.
- Corrupted tokens or a broken WAM component, often after a Windows update or a profile migration.
- Signed in to Office with the wrong account, such as a personal Microsoft account alongside your work one.
- A damaged Outlook profile, especially one carried over from years of upgrades.
- Policy changes, such as new MFA requirements or a Conditional Access policy with a short sign-in frequency.
Fix 1: Check the Basics
- Sign in to outlook.office.com in a browser with the same account. If that fails too, the problem is your account or password, not Outlook. See our guide to Microsoft 365 sign-in errors.
- Check the date and time on your PC are correct. Token sign-ins fail if the clock is out.
- If you've just changed your password, restart the PC before trying again so every app picks up the change.
Fix 2: Clear Saved Credentials
- Close Outlook, Teams and any other Office apps.
- Open the Start menu, type Credential Manager and open it.
- Choose Windows Credentials.
- Under Generic Credentials, remove entries that begin with
MicrosoftOffice,MicrosoftOffice16_Dataor mentionOutlookor your email address. Click each entry and choose Remove. - Restart the PC, open Outlook and sign in once when prompted.
Don't remove credentials you don't recognise for other systems, such as mapped drives or VPN clients. Stick to entries clearly related to Office, Outlook or Microsoft 365.
Fix 3: Sign Out of Office and Check Your Work Account
- In Outlook (or Word), go to File > Office Account and click Sign out under User Information. Sign out of any personal accounts listed too.
- Close all Office apps.
- Open Settings > Accounts > Access work or school. Your work account should be listed. If it's missing or showing an error, click it and choose Disconnect, restart, then add it back with Connect. If the account says it's managed by your organisation and you can't disconnect it, leave it alone and ask your admin.
- Reopen Outlook and sign in with your work account only.
Fix 4: Repair the Windows Sign-In Component
If the sign-in box flashes up blank, closes immediately, or the loop survives everything above, the Entra sign-in broker that WAM relies on may be damaged. Microsoft's documented fix is to re-register it. Open Windows PowerShell as the signed-in user (not as administrator) and run:
Add-AppxPackage -Register "$env:windir\SystemApps\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\Appxmanifest.xml" -DisableDevelopmentMode -ForceApplicationShutdown
Restart and try Outlook again.
Older guides suggest registry changes to disable modern authentication or WAM, such as DisableADALatopWAMOverride. Microsoft no longer supports disabling WAM in Microsoft 365 apps, and these tweaks usually cause new problems. Avoid them.
Fix 5: Create a New Outlook Profile
A damaged profile can keep asking for credentials however clean everything else is. With classic Outlook closed:
- Open Control Panel, switch to small icons and choose Mail (Microsoft Outlook).
- Click Show Profiles > Add, give it a name and add your work email. Autodiscover should set it up automatically.
- Select Always use this profile, choose the new one and click OK.
Your email lives in Exchange Online, so a new profile simply downloads it again. Local PST files (old archives) need re-attaching manually.
For Your Microsoft 365 Admin
- Check the sign-in logs. In the Entra admin centre, open the user and look for Sign-in logs. Failures show an error code and, under the Conditional Access tab, which policy applied. A string of interrupted sign-ins usually points at MFA or Conditional Access rather than the PC.
- Review sign-in frequency. A Conditional Access policy with a short sign-in frequency session control forces regular re-authentication. That's sometimes intended, but an aggressive value on managed devices produces constant prompts.
- Check MFA registration. If the user hasn't completed MFA setup, Outlook may keep prompting. Look under the user's Authentication methods.
- Check the device state. On the PC,
dsregcmd /statusshows whether it's Entra joined or registered and whether it holds a valid primary refresh token (AzureAdPrt : YES). A missing token explains repeated prompts across all Office apps. - Confirm the client is current. Very old Office builds, or Office 2013 and earlier, don't handle modern authentication properly against Exchange Online.
How to Stop It Happening Again
Password loops mostly happen on PCs that drift: half-joined to Entra, a mix of personal and work accounts, years-old profiles and inconsistent security policies. Devices that are joined to Entra ID and enrolled in Intune, kept on a supported Microsoft 365 Apps update channel, and covered by sensible Conditional Access policies give users single sign-on that just works. Moving to passwordless sign-in with Windows Hello for Business removes most password prompts altogether.
When to Call in Help
If the prompts affect several people, appeared after a policy change, or the steps above didn't stick, the cause is probably in your tenant configuration rather than the PC. Our IT support team can fix it remotely, and our managed IT service keeps devices and policies consistent so it doesn't keep coming back. Get in touch to talk it through.
Related Reading
Common questions
Usually because Windows is holding stale credentials or a broken sign-in token, often after a password change or Windows update. Clearing Office entries from Credential Manager and signing out and back in fixes most cases.
Remove the saved Office credentials, check your work account is connected under Access work or school, and create a new Outlook profile if needed. If it still happens, ask your admin to check for a Conditional Access sign-in frequency policy.
No. With Microsoft 365, your email is stored in Exchange Online and downloads again into the new profile. Only local PST archive files need to be re-attached manually.
No. Exchange Online no longer supports basic authentication, and Microsoft doesn't support disabling WAM in current Office apps. Fix the underlying credential or profile problem instead.
Want to talk about this?
Book a free 15-minute call and we'll discuss how this applies to your business.
Get IT tips in your inbox
Practical advice for small businesses. No spam.
