What are they?

Some non-browser applications do not support the modern authentication process as it introduces pauses/breaks which occur as you enter your additional factor (e.g a smartphone push notification). However, some email clients can support modern authentication with the use of App Passwords. Support varies with each vendor, so it is worth checking their website.

Where would you need them?

The app password is used in place of your normal College password in the account setting of your app.  You can use different app passwords for different applications, so you could have one for the Outlook app on your mobile phone and a different app password for Outlook on your tablet.

The table below shows examples of when App Passwords will be required as your second factor.

Application

Phone

Tablet

Desktop

Laptop

Outlook Mail Client

MFA Supported

MFA Supported

MFA Supported

MFA Supported

Thunderbird (macOS, Linux & Windows)

N/A

N/A

MFA Supported*

MFA Supported*

Non-Outlook Mail Client

Varies on email client used**

Varies on email client used**

Varies on email client used**

Varies on email client used**

*Only Thunderbird v78 or higher supports MFA.

**iOS 11, iPadOS 13.1 and macOS 10.14 and above native mail client supports MFA. For other email clients you should check the support pages of the vendor.

How do you set up/manage app passwords?

  1. Please go to Microsoft’s Security Information webpage
  2. Select Add sign-in method.
  3. From the drop-down list, select App password.
  4. Create a unique name for your password so you know where it is being used.
  5. Choose Copy password to clipboard. You won't need to memorise this password.
  6. Go to the app that you want to connect to your Office 365 account. When prompted to enter a password, enter the app password in the box.

Tip: If you create another app password, you'll be prompted to name it. For example, you might name it "email-iPad"