
On the other hand, if a PIN is compromised, they can use it only on that device they can’t use it to sign into your account on any other device. (App passwords can be used only once and can't be retrieved after you create them, but then again creating a new one is just as fast as retrieving one would be.If a password is compromised in some way, the person who has entered the system may have access to all platforms that are linked to that password. To save you the trouble of needing to create and key in a new app password each time you sign in, you can check the box for Remember my credentials or Remember me. Just enter the app password on your screen on the log-in screen where you would normally enter your regular account password.

A new app password will be created instantly to use on any Microsoft app or device that doesn't support two-factor verification security codes. Next, click the more security options link below basic options and then under App passwords, click Create a new app password. You'll receive a code via your authenticator app to sign in. Go to Microsoft's Security basics page and sign in to your Microsoft account. You will, however, need to generate a separate app password for each Microsoft service or device that you use that doesn't support two-step verification codes. It's a long, random string of letters, but you'll use it only once. An app password is randomly generated from Microsoft's account security settings page. So that your account isn't left unprotected (or, rather, under-protected with only your regular password) on such services and devices when you've gone through the trouble of enabling two-step verification, Microsoft will steer you toward creating an app password.

Here is Microsoft's list of its apps and services that will require an app password if you've enabled two-step verification: With older apps and devices and third-party email clients, you can't use two-step verification to receive a security code via the Microsoft Authenticator app to log in. Not all Microsoft apps and devices support two-step verification.

Creating up an app password is painless and needs to be done only once per app or device. Don't let this minor inconvenience dissuade you from continuing to use two-step verification. If you've set up two-step verification to protect your Microsoft account, it won't be long before you attempt to sign in to a Microsoft app or your old Xbox 360 with your account name and password only to be greeted with a message telling you that your regular password is no good and you will need an app password instead.
