timetobail
My stack

Exchange Online · Forced move · Announced January 27, 2026 · Sources checked Oct 13

Time to bail on Password SMTP AUTH (Basic auth) in Exchange Online?

Time to Bail · Boarding pass

FromPassword SMTP AUTH (Basic auth) in Exchange Online
ToYour pick

Act. You can stay.

At the end of December 2026, password SMTP AUTH is off by default. Admins can still turn it on for now.[1]

Act means: change a setting or plan before the date. You can stay.

Gate closes
No set date
Check the notice for the date on your plan.
Time left
No set date
Status
Act

Exchange Online: password SMTP AUTH off by default end of 2026

At the end of December 2026, Exchange Online turns off SMTP AUTH with a username and password by default. Printers, apps and scripts that send mail this way need OAuth.

What to do next

Tick steps as you go. Your progress stays in this browser.

  1. List what sends mail with a password

    Check printers, scanners, website forms, apps and scripts that send through Exchange Online.

  2. Switch each one to OAuth

    Update the device, plugin or code so it signs in with OAuth instead of a password.

  3. Keep a short list of exceptions

    If a device cannot use OAuth, plan to replace it. Admins can turn password SMTP back on for now.

Facts we checked

Facts and their sources
Off by defaultEnd of December 2026, for existing tenants[1]
Until thenNo change[1]
Can admins turn it back on?Yes, admins will still be able to enable it if needed[1]
New tenants created after December 2026Not available by default; OAuth is the supported method[1]
Final removal dateMicrosoft will announce it in the second half of 2027[1]
What to useOAuth[1]
PostedJanuary 27, 2026[1]
Devices and apps that send with a passwordStop sending at the end of December 2026 unless an admin turns it back on[1]

Sources

Check it yourself. Every fact above links here.

  1. Updated Exchange Online SMTP AUTH Basic Authentication deprecation timeline Microsoft · primary · checked Oct 13
Read the published editorial report

What changed

Time to bail on Password SMTP AUTH (Basic auth) in Exchange Online? Act. You can stay. At the end of December 2026, password SMTP AUTH is off by default. Admins can still turn it on for now.

On our scale this is Act: change a setting or plan before the date. You can stay.

At the end of December 2026, Exchange Online turns off SMTP AUTH with a username and password by default. Printers, apps and scripts that send mail this way need OAuth.

Here are the facts we checked:

  • Off by default: End of December 2026, for existing tenants (Microsoft)
  • Until then: No change (Microsoft)
  • Can admins turn it back on?: Yes, admins will still be able to enable it if needed (Microsoft)
  • New tenants created after December 2026: Not available by default; OAuth is the supported method (Microsoft)
  • Final removal date: Microsoft will announce it in the second half of 2027 (Microsoft)
  • What to use: OAuth (Microsoft)
  • Posted: January 27, 2026 (Microsoft)
  • Devices and apps that send with a password: Stop sending at the end of December 2026 unless an admin turns it back on (Microsoft)

You can stay on Exchange Online. You have to change a setting or plan before the date.

Leaving is a choice here, not a must.

Microsoft is the main source for this page. Exchange Online has not said more than what is listed here. If a fact is not on this page, we do not know it yet.

Who is affected

Devices and apps that send with a password: Stop sending at the end of December 2026 unless an admin turns it back on.

There is no single date for everyone. Check the date in your own account.

What to do now

  1. List what sends mail with a password. Check printers, scanners, website forms, apps and scripts that send through Exchange Online.
  2. Switch each one to OAuth. Update the device, plugin or code so it signs in with OAuth instead of a password.
  3. Keep a short list of exceptions. If a device cannot use OAuth, plan to replace it. Admins can turn password SMTP back on for now.

A few tips:

  • Make the change yourself before the date. Do not wait for the last reminder email.
  • Write down your current plan or settings first, so you can compare after the change.
  • After the change, open your settings again and check that it worked.

How to tell your users

If the change affects your members or team, send one short email. Say what changes for them and when. Put the most important line first.

If there is a date, send a short reminder a few days before it. Keep a copy of the list you sent it to.

Options people mention

Listed for convenience. Not ranked. Not paid. These names come up in threads and reviews; that does not show where people moved.

Before you pay, check the price page of each tool yourself. Prices change, and we only list what our sources say.

Questions people ask

No questions collected yet.

Sources

Thanks.

Did this answer your question?

Run SaaS spend at work? Get these changes before the invoice

Arrivals · for builders

Building where they land?

People on Password SMTP AUTH (Basic auth) in Exchange Online can stay if they make the change. Some would rather leave. Get the playbook for this change, and list your product here.

Listing is free. An editor checks it. Not ranked. Not paid.

Open the playbookList your product