Thunderbird Hotmail or Outlook accounts may function on one computer but fail on another due to cached OAuth2 tokens, conflicting server settings, or corrupted local profile data. This inconsistency often stems from how each instance handles Microsoft's authentication handshake rather than credential errors. Verifying the IMAP and SMTP configurations against Microsoft’s current standards is the primary diagnostic step.
Verify Server Settings and Authentication
The most common cause for this discrepancy is a mismatch in incoming or outgoing server details between the working and non-working machines. Microsoft frequently updates its security protocols, requiring specific port numbers and encryption methods. On the failing PC, navigate to
Account Settings >
Server Settings. Ensure the Incoming Mail (IMAP) server is set to
outlook.office365.com with SSL/TLS on port 993. For the Outgoing Mail (SMTP) server, use
smtp-mail.outlook.com with STARTTLS on port 587.
It is critical that both machines are using the exact same authentication method. Thunderbird typically uses OAuth2 for modern Outlook accounts. If the failing PC is attempting to use "Normal Password" instead of "OAuth2," it will reject the connection because Microsoft has deprecated basic authentication for many account types. Check the
Outgoing Server (SMTP) settings and click
Edit to ensure the authentication method matches the working PC.
Clear Corrupted OAuth2 Tokens
When an account works on one PC but not another, the issue often lies in stale or corrupted authentication tokens stored locally. The working PC likely holds a valid token, while the failing PC has an expired or malformed one. To resolve this, you must remove the existing account configuration and re-add it to force a fresh authentication handshake.
Go to
Tools >
Account Settings, select the problematic email account, and choose
Remove Account. When prompted, confirm that you do not wish to delete the local folders if you want to preserve any downloaded messages, though deleting them is often safer to ensure a clean slate. After removal, restart Thunderbird. Then, add the account again by entering your email address. Thunderbird should automatically detect the provider and prompt you to log in via a web browser window. Complete the Microsoft login process there. This generates a new, valid OAuth2 token specifically for that machine.
Check for Profile Corruption
If server settings and OAuth2 tokens are correct, the local user profile on the failing PC may be corrupted. Profiles store all preferences, extensions, and database files. A corrupted
sqlite database can prevent successful connections even with perfect credentials. You can diagnose this by creating a new profile.
Exit Thunderbird completely. Press
Windows Key + R, type
thunderbird.exe -p, and press Enter. In the Profile Manager, create a new profile and launch Thunderbird with it. If the account works in this new profile, the original profile is damaged. You can migrate your data from the old profile to the new one by copying the
ImapMail and
Mail folders from the old profile directory to the new one. Locate these directories by clicking
Open Profile Folder in the Profile Manager before launching the application.
Disable Conflicting Extensions
Third-party extensions can interfere with the authentication flow or network requests required by Microsoft servers. Common culprits include ad blockers, privacy managers, or older email management tools. On the failing PC, go to
Tools >
Add-ons and Themes. Disable all non-default extensions. Restart Thunderbird and attempt to connect. If it works, re-enable extensions one by one to identify the conflict.
For users managing multiple Microsoft services, understanding how different applications interact is useful. For example, issues with integrating external apps can sometimes mirror email sync problems. See
Connecting Outlook Emails with Epic Games Accounts for insights into cross-application authentication behaviors. Additionally, if you are migrating or troubleshooting enterprise environments, reviewing how offline data is handled can provide context for sync failures. Refer to
Removing Offline Emails from Outlook on a Sign-Out Device to understand how local caching impacts connectivity.
Firewall and Antivirus Interference
Security software on the failing PC might be blocking Thunderbird’s access to the internet. Some antivirus programs have built-in email scanning features that inspect outgoing and incoming traffic. If the scanning engine fails to verify the encrypted connection properly, it will drop the packet. Temporarily disable the firewall and email scanning features of your antivirus software. Test the connection. If it succeeds, add Thunderbird to the exclusion list in your security software.
Network Configuration Differences
Finally, check for network-level restrictions. The failing PC might be connected to a different network segment, such as a guest Wi-Fi or a corporate proxy that blocks OAuth2 redirects. Ensure that the PC can reach
login.microsoftonline.com without interruption. Use the browser on the failing PC to log into Outlook Web Access (OWA). If OWA works but Thunderbird does not, the issue is isolated to the Thunderbird client configuration. If OWA also fails, the problem is network-wide.
Frequently Asked Questions
Why does my password work in the browser but not in Thunderbird?
This happens because browsers use active sessions or saved cookies, while Thunderbird requires explicit authentication. Microsoft may require multi-factor authentication (MFA) which is easier to complete in a browser pop-up than in a desktop app. Always use the OAuth2 login option in Thunderbird to trigger the secure browser-based MFA flow.
Can I use App Passwords instead of OAuth2?
No, Microsoft has largely disabled basic authentication for Outlook.com and Office 365 accounts. App passwords were a workaround for legacy systems but are no longer supported for standard consumer accounts. You must use OAuth2 to authenticate successfully.
What if removing the account deletes my emails?
If you only remove the account from Thunderbird, your emails remain safe on the Microsoft server. However, any emails downloaded to the local hard drive may be deleted if you choose that option during removal. It is best to back up your local folder files before removing the account to prevent data loss.
How do I know if my profile is corrupted?
Signs of corruption include missing folders, inability to send mail despite correct settings, or Thunderbird crashing upon startup. Creating a new profile via the command line switch is the definitive test. If the new profile connects successfully, the old profile is the source of the error.
Does changing DNS affect Thunderbird connectivity?
Yes, if your DNS provider is blocking or misrouting Microsoft’s authentication endpoints. Switching to a public DNS like Google (8.8.8.8) or Cloudflare (1.1.1.1) can resolve connectivity issues caused by ISP-level filtering or DNS propagation delays.