How to Manage and Review Active Microsoft 365 Sign-in Sessions and App Passwords

Summary

This guide helps you troubleshoot and resolve: How to Manage and Review Active Microsoft 365 Sign-in Sessions and App Passwords. Follow the steps below to fix the issue.

Common Causes

Keeping track of where your Microsoft 365 account is signed in helps you protect your business data. If you have lost a device, left a computer logged in at a shared office, or simply want to tighten your security, you can review active sessions and sign them out remotely. You can also manage app passwords, which are used by older applications that do not support modern multi-factor authentication.

Quick Fix Steps

1. Sign in to your Microsoft 365 account at https://myaccount.microsoft.com/.
2. Go to Security info.
3. Review Sign-in activity and sign out of any unfamiliar sessions.
4. Manage app passwords under Security info > Add method > App password (if enabled by your admin).

Detailed Instructions

Reviewing Active Sign-in Sessions

1. Open your web browser and go to https://myaccount.microsoft.com/.
2. Sign in with your Microsoft 365 work or school email address and password.
3. Select Security info from the left navigation menu.
4. Click Sign-in activity (or View sign-in activity).
5. Review the list of recent sign-ins, including location, date, time, and device.
6. If you see a session you do not recognise, select it and choose Sign out to end that specific session, or use Sign out everywhere to end all sessions except the current one.

Managing App Passwords

App passwords are only available if your organisation's admin has enabled them for your tenant. If you do not see the option, contact your IT administrator.

1. From your Microsoft 365 My Account portal (https://myaccount.microsoft.com/), select Security info.
2. Click + Add sign-in method.
3. From the dropdown, select App password and click Add.
4. Enter a name for the app (for example, Outlook 2016 or Old iPhone Mail).
5. Copy the generated password and paste it into the application that requires it.
6. Select Done.

Deleting an App Password

1. Return to Security info in the My Account portal.
2. Locate the app password you want to remove in the list of sign-in methods.
3. Select Delete next to that app password.
4. Confirm the removal when prompted.

Troubleshooting

I Cannot See the App Password Option

App passwords only appear if your organisation's admin has enabled the "App passwords" feature in the Microsoft 365 admin center. If the option is missing, contact your IT administrator to enable it for your account.

I Still See an Old Device in Sign-in Activity

Sessions may take a few minutes to disappear after you sign them out. If the device remains listed after an hour, change your Microsoft 365 password to force all active sessions to end. Your admin can also revoke sessions from the Microsoft 365 admin center.

An Application Stopped Working After I Changed My Password

Older applications that use app passwords will stop working if you change your main Microsoft 365 password or remove the app password. Generate a new app password for that application using the steps above.

If you need further assistance securing your Microsoft 365 account, Open a Ticket with 220 Internet Services support.

For help resetting your Windows login password, see Password reset (Windows login).

Still Having Issues?