Is Outlook down due to a security breach? Microsoft Outlook outage leaves users locked out as Microsoft investigates authentication glitch

Is outlook down? Microsoft Outlook is down for hundreds of users across the world, with a surge of login failures hitting inboxes at the worst possible time — the start of the workweek. By 11am on Monday, April 27, 2026, more than 800 reports had flooded into Downdetector. Over 60% of affected users cannot log in at all. Microsoft has confirmed the disruption, officially classifying it as a "service degradation" on its Service Health page.

The Outlook outage is not a minor inconvenience. It is shutting people out of their primary communication tools during peak business hours. Unlike a slow load or a glitchy attachment, this failure is at the authentication layer — the gate that decides whether you can enter at all. That makes it far harder to work around, and far more alarming for users who initially assumed their accounts had been compromised.

Outlook down: What is actually going wrong with Outlook right now?

The core of the Outlook down problem is a breakdown in how Microsoft's servers authenticate users. When you try to log in, the server is failing to verify your identity correctly — triggering unexpected password prompts, looping 2FA requests, and "account not authenticated" warnings. Technically, this appears to stem from a fault in how Microsoft's backend communicates with both its own apps and third-party email clients like Apple Mail.


Several users on Reddit and Downdetector described the same maddening cycle: enter your credentials, pass the two-factor authentication step, and then get kicked straight back to the login screen. One user wrote that they were told to verify via an alternative email, added one, and watched it fail in exactly the same way. The loop offers no exit and no clear error message that explains the real cause.

"No authentication is working apparently. I'm now locked out of my two main accounts."

Who is affected — and is anything still working?

The Outlook outage is hitting consumer accounts hardest, covering both Outlook.com and Hotmail addresses. Some users report partial functionality: the official Outlook web app and mobile app load emails but refuse to send them, while PC users see a "not sent" error even when the message actually dispatches on the web version. Others report total lockout across every access method — browser, desktop app, and mobile.

The disruption appears most severe for users relying on third-party clients. That is a significant clue. When server-to-client authentication breaks specifically for outside apps, it points to a change or failure on the Microsoft server side rather than a bug in any individual app. That is also why deleting and reinstalling the email app does absolutely nothing — the fault is upstream, not local.

Why Outlook login loops feel like a security breach — but aren't

The most unsettling part of this Outlook outage is how much it resembles an account takeover. Sudden password prompts, failed logins, and warnings that your account is "unauthenticated" are also exactly what you'd see if someone changed your password or if a phishing attack had succeeded. Microsoft's delayed public acknowledgment — before which users had no official word — left thousands of people convinced their emails had been hacked.

This matters because the panic response to a perceived breach is destructive. Users attempted password resets, added recovery emails, changed security settings, and reinstalled apps. None of it helped — and some of it may have complicated matters. The lesson here is that when a major platform like Outlook goes down, widespread simultaneous reports on Downdetector are your fastest signal that this is a system-wide event, not a targeted attack on you.

What Microsoft says and what users should do now

Microsoft has acknowledged the Outlook service degradation through its official Service Health dashboard and promised rolling updates as engineers work to identify the root cause. The company has been explicit that local troubleshooting — changing security settings, removing and re-adding accounts, reinstalling applications — will not resolve the problem until a server-side fix is deployed.

For now, the most practical advice is to stop trying workarounds that could lock you out further. If the official Outlook web version is loading, use it to read critical emails. Avoid submitting multiple password reset requests in quick succession. Keep an eye on Microsoft's Service Health page or Downdetector for real-time updates. The fix, when it comes, will arrive silently on Microsoft's end — and your login should simply start working again without any action required on your side.