
New AirSnitch Attack Bypasses Wi‑Fi Encryption in Homes, Offices & Enterprises
February 27, 2026What Is an App Password? Why It’s Needed & How to Set It Up (With Moneysoft Example)
A complete Azure AD, Microsoft 365, and Moneysoft SMTP guide. Learn what an App Password is, when you need it, how to create it, and how to configure Moneysoft Payroll Manager to send payslips securely.
🔐 What Is an App Password?
An App Password is a unique 16‑character password generated by Microsoft 365. It is required when an application does not support Multi‑Factor Authentication (MFA). Apps like Moneysoft Payroll Manager
Where Do We Need It?
Needed when MFA is enabled but the app does NOT support modern authentication. Examples: Moneysoft, old scanners, SMTP devices, IMAP/POP3 clients.
Advantages
- Works with legacy business apps
- Can be reset/revoked instantly
- Keeps MFA enabled without disabling security
Disadvantages
- Less secure than OAuth
- Only works with basic auth protocols
- May be deprecated in the future
🛠 Azure / Microsoft 365 Admin Configuration (Server Side)
Before the user can use an App Password, the Microsoft 365 admin must ensure the following:
Step 1 — Enable SMTP AUTH for the User
Go to: Microsoft 365 Admin Center → Users → Active Users → Select User → Mail → Manage email apps
Enable “Authenticated SMTP”.
Step 2 — Ensure MFA Is Enabled
App Passwords only exist if MFA is enabled. If MFA is OFF → You don’t need an app password (but security is weaker).
Step 3 — Create the App Password
The user must visit: https://account.microsoft.com/security → Advanced Security Options → Create App Password
This generates a 16‑character password used in Moneysoft SMTP settings.
💼 Moneysoft Example – User‑Side Configuration
Here’s how to use the App Password inside Moneysoft Payroll Manager to send payslips via email.
Moneysoft Email Settings
- SMTP Server: smtp.office365.com
- Port: 587
- Encryption: TLS
- Username: your Microsoft 365 email
- Password: the App Password (not your normal password)
Click Test Settings to confirm email delivery works.
💡 How Globoserve Technologies Can Help
Setting up secure authentication for legacy applications can be confusing, especially when combining MFA, SMTP, and Azure AD policies. Globoserve Technologies helps you by:
- Configuring Microsoft 365 security correctly
- Setting up App Passwords, SMTP, and MFA-powered workflows
- Configuring Moneysoft Payroll Manager email sending
- Auditing and securing your entire identity environment
- Monitoring SMTP, MFA, and login events for threats
❓ Frequently Asked Questions (FAQ)
1. Is an App Password the same as my Microsoft login password?
No — it is a separate special password created only for apps that do not support MFA.
2. Can I create multiple App Passwords?
Yes, you can create multiple and revoke them individually if needed.
3. Do I need an App Password if MFA is disabled?
No — it only exists when MFA is enabled.
4. Why does Moneysoft need an App Password?
Because Moneysoft uses SMTP, which does not support modern MFA login screens.
5. Will App Passwords be retired?
Eventually Microsoft may remove support, but SMTP authentication is still widely used today.





