Office 365 status: access issues and outage reports

Problems in the last 24 hours

The graph below depicts the number of Office 365 reports received over the last 24 hours by time of day. When the number of reports exceeds the baseline, represented by the red line, an outage is determined.

Most Reported Problems

The following are the most recent problems reported by Office 365 users through our website.

• Sign in (62%)
• Errors (21%)
• Website Down (18%)

Live Outage Map

The most recent Office 365 outage reports came from the following cities:

City	Problem Type	Report Time
Paris	Sign in	3 days ago
Milly-la-Forêt	Errors	3 days ago
Unión de Crédito Agrícola de Hermosillo	Sign in	12 days ago
Mumbai	Errors	14 days ago
Bogotá	Sign in	14 days ago
Antiguo Cuscatlán	Website Down	14 days ago

Full Outage Map

Community Discussion

Tips? Frustrations? Share them here. Useful comments include a description of the problem, city and postal code.

Beware of "support numbers" or "recovery" accounts that might be posted below. Make sure to report and downvote those comments. Avoid posting your personal information.

Office 365 Issues Reports

Latest outage, problems and issue reports in social media:

• 
  Cockatrice (@kimtaikennedy) reported 4 minutes ago

  Just login to entra dashboard portal as office365 admin and delete all MFAs there and login back to email easy

• 
  Alicia Cook (@acook0428) reported 8 minutes ago

  @Office do you know that COM addins are not working in Office 365? Please fix it!!

• 
  Jon Rolfe🇺🇸 🇬🇧🏴󠁧󠁢󠁷󠁬󠁳󠁿🇨🇦🇲🇽🇫🇷 (@JonRolfe8) reported 9 minutes ago

  @therahul4402 What's happening with Linux Mint? Windows 11 happened. I did not have serious issues with Windows 10. Log into your MS account..harder and harder local options. All your personal and IP and Work Product files have to be on Onedrive. Copilot. Sales push for Office 365, when anyone with a brain has been using OS for decades. Edge harassment. Poison Updates . Slinking to subscriptions. Eternal cash flow. GFYS with a road flare.

• 
  Nick (@maietta) reported 10 minutes ago

  Holy **** GoDaddy is among the worst companies on the planet. Been trying desperately to get them to fix the issue with a domain name previously owned by another company who in the past, used Office 365. Now that my client owns the domain, we can't seem to get them to remove the domain. Microsoft support has been non-existent as well. They assigned a dude to the case, but then he dropped the ball and won't reply to me.

• 
  Md Najeeb Ahmed (@najeeb775) reported 10 minutes ago

  @MicrosoftHelps it's been 8 days since my office 365 outlook email is blocked by Microsoft apparently because of a technical issue which I have no clue about. Ticket already raised and after multiple follow up with the agent there is no response or progress. Ticket 260430003000.

• 
  Eric Sauvageau (@RMerlinDev) reported 11 minutes ago

  @Diss0lution For many years now, the Office 365 installer is broken in French, instead of showing something like "90% complété" in the system notification icon, it says "90lformat error! complété" - incorrectly parsing the percent sign as a parameter. Trillon dollars company at work.

• 
  Naoun (@NaounBaal) reported 13 minutes ago

  Recently I've been thinking about how though microsoft does get a lot of hate, if you judge the company by its good products its actually genuinely a pretty good company. It just gets dragged down by the ****** versions of windows and the hell-scape that has become office 365.

• 
  Shane (@Shane_L) reported 16 minutes ago

  @adahstwt Just deployed a small app for one of my company’s franchisees to use. Deployed on Azure because we use Office 365 and I could rely on existing MS accounts for auth. Never again… terrible experience. Azure is so disjointed…

• 
  Mykl Ü (@MyklTheYankee) reported 18 minutes ago

  @Smileyyeg Works for me. But it was better before the office365 crap was shoved down your throat at every turn.

• 
  Pythis (@Pythis1313) reported 18 minutes ago

  @darknesss932 An attorney should request a server level search utilizing Microsoft Purview ediscovery. I would wager they are using office365 for email which means that a query kql could be created pertinent to the case executed on the entire tenant for the time frames involved.

• 
  jun (@xiaosuha) reported 20 minutes ago

  i get the momentum for locked in but my office 365 is shutting down bro

• 
  The Catalyst Edge (@zeatle2) reported 25 minutes ago

  Two very different setups. $CLOV (Clover Health) — not in today's scrub, but running off a REAL catalyst. 🟢 Medicare 4.5-star upgrade via federal COURT ORDER (court forced CMS to re-rate) 🟢 Covers 97%+ of members on Contract H5141 🟢 Higher star rating = higher CMS reimbursement rates in 2027 🟢 Q1 2026: GAAP profitable, revenue +62% YoY 🔴 Already up 18.9% yesterday — needs consolidation first This is a fundamental re-rating, not a pump. Medicare stars = real dollars. Entry: $4.70–$5.00 on pullback | T1: $6.20 | T2: $7.50 | Stop: $4.20 $MSFT (Microsoft) activity score 522 — #3 on the full scrub. 🟢 Enterprise AI Copilot embedded in Office 365, Teams, Azure — the deployment layer 🟢 Down 14% YTD = multiple compression on a franchise business 🟢 #3 scrub = institutional money starting to re-rate 🔴 ORCL's $40B raise rattles AI infra capex narrative — watch for spillover At $398, this is best-in-class enterprise AI at a real discount. Entry: $395–$405 | T1: $435 | T2: $460 | Stop: $380

• 
  npaladin2000 (@npaladin2000) reported 26 minutes ago

  @Itsfoss Microsoft actually subsidized the cost of Windows in order to sell OneDrive and Office365 subscriptions. And yes, that's back to the same old anti trust issues.

• 
  Jonathan Cantliff (@cantliff9) reported 26 minutes ago

  @madebygoogle @MicrosoftHelps @gmail Gmail app not working with Office 365 emails (again) Doesn't seem to want to load modern authentication Could someone look into this please Widespread complaints online and on app store reviews. Folks, this needs some attention!

• 
  Matt Diebolt (@mdiebolt) reported 28 minutes ago

  @domster @bradgessler Our biggest are by far the ones that support our PowerPoint for Office 365 add-in. Places where you have a JavaScript API where it’s impossible for it to be managed on the server.

• 
  Professor Simon (@ProfSimonOnline) reported 28 minutes ago

  Did you know that personal devices can become gateways for corporate data breaches? A recent case revealed a malware attack that accessed Office 365 through a compromised BYOD. The fix? Continuous monitoring and behavior analysis! How secure is your work device? #CyberSecurity

• 
  Simon Holman (@SimonHolman) reported 32 minutes ago

  @Outlook I know you want everyone paying for Office365, but do you really need to make configuring IMAP accounts so difficult. Just give the option to specify the servers without just assuming them. I shouldn't have to go into Control Panel to fix it!

• 
  Microsoft Threat Intelligence (@MsftSecIntel) reported 35 minutes ago

  Microsoft Threat Intelligence has identified a cluster of compromised websites displaying ClickFix lures and using EtherHiding, a technique associated with the ClearFake campaign. An injected Base64-encoded JavaScript contacts a BNB Smart Chain RPC gateway to query a smart contract previously reported in connection with ClearFake to fetch next-stage instructions. Content stored in a smart contract is resistant to conventional takedown or sinkholing because only the owner of the cryptocurrency wallet that deployed it can make changes. Users are presented with a fake CAPTCHA that instructs them to open the Windows Run dialog, paste clipboard content, and press Enter to execute an attacker-supplied command under the guise of verification. We’re seeing multiple forms of command obfuscation and living-off-the-land abuse, including conhost, cmd, PowerShell, pcalua, mshta, rundll32, msiexec, curl, WMI, WebDAV, and scheduled tasks. Carets split keywords, environment variables hide interpreters, and Windows run headlessly or minimized. TerminalFix lures apply the same technique but direct users to Windows Terminal or PowerShell instead of the Run dialog. This campaign demonstrates that ClickFix and TerminalFix are a high-volume initial access technique. Microsoft reports campaigns targeting thousands of enterprise and consumer devices globally every day, while some malvertising chains can funnel visitors to scam pages. Numerous actors use the technique to deliver Lumma Stealer and other infostealers, RATs such as Xworm and AsyncRAT, loaders including MintsLoader, and remote management tools. A single successful execution can expose credentials, establish persistence, enable lateral movement, and create a path to human-operated ransomware and potential domain compromise. Microsoft recommends that organizations enable Microsoft Defender network, web, and cloud-delivered protection; restrict Run and command-line tools where not required; enable PowerShell script-block logging; and implement application control. Users should never paste commands from CAPTCHAs, browser errors, emails, ads, or unsolicited support pages into Run, Terminal, PowerShell, or Command prompt. Microsoft Defender XDR provides layered protection across the ClickFix attack chain. Defender SmartScreen and Defender for Office 365 help block malicious sites, links, attachments, and fake CAPTCHA lures, while Defender for Endpoint detects suspicious command execution and outbound connections through alerts like “Suspicious command in RunMRU registry”, “Possible ClickFix activity”, “Possible initial access from an emerging threat”. Microsoft Defender Antivirus blocks malicious command execution using detections such as Trojan:Win32/ClickFix.* and Trojan:Win32/TermFix.*. Treat these alerts as evidence of a potential initial access incident: isolate affected devices, investigate credential exposure and persistence, and hunt for related activity.

• 
  Mega Man (@callah32) reported 39 minutes ago

  @PaperBozz You’ll always have enterprise customers where as it makes more sense to rent (think Office 365) vs hire a team (and lofty capex budget) to mange compute on prem. Makes alot of sense to rent compute in other words, solves a problem plenty viable buisnenes model/service. Everything digital future.

• 
  Rob (@Rob_Tb_West) reported 44 minutes ago

  @NXT4EU We used to have office computers, running on an office server park. No outside computers had access. Micro$oft mandates Office 365 and OneDrive. The server may be in Europe, but where is the backup server. And more important: Who has admin rights over your files?

• 
  Cédric Yvon (@YvnCdric) reported 44 minutes ago

  @JesterJum Use open office. Why office 365 that is slow?

• 
  Coco Freak (@Coco_the_freak) reported 46 minutes ago

  So aparrently, the „Smart“ App Control from #Microsoft in the #Windows „Security“-Settings blocks you from installing #office365 … and you have to PERMANENTLY shut off that „Security Feature“ to fix this issue … fml why did i go into IT-Support 🙈😭

• 
  Bɛrima Yaw Poku 🧠👁️👂🏾 (@barimayawpoku) reported 51 minutes ago

  @davibaah @Mr_GeorgeAddo @NITAGhana They don’t even dedicated servers built and managed by the gov. let alone have infrastructure to protect sensitive and critical data… tweaa… imagine NITA ( the nation’s IT branch using subscription of office365). What happened to on-premise and dedicated exchange server?

• 
  Glich (@Glich) reported 52 minutes ago

  @yonann partly true. I work corp IT. A good part of my users whould be fine with a snapdragon chromebook. But they get tier Ryzen 9 or I7 . All their work in in office365 and chrome. and this year our standard low spec model we issue increased in price 50%.

• 
  DFIR Radar (@DFIR_Radar) reported 53 minutes ago

  Silk Typhoon (HAFNIUM), a Chinese 🇨🇳 state APT, has evolved from on-prem Exchange exploitation to cloud-native supply chain attacks, most recently abusing CVE-2025-3928 in Commvault's Azure-hosted M365 backup SaaS to pivot into downstream customer tenants. - Initial access spans three vectors: CVE-2025-3928 (zero-day in Commvault Web Server, T1190), stolen API keys from privileged cloud vendors (T1195), and leaked corporate credentials found on public repos like GitHub (T1078.004). The Commvault campaign gave them client secrets for Metallic M365 backups, opening direct paths into customer M365 environments via hijacked service principals. - Lateral movement pivots from on-prem to cloud by targeting Entra Connect servers (T1210, T1078.002), enabling privilege sync between Active Directory and Entra ID. Credential dumping and key vault theft support pass-the-hash moves (T1550.002) into Azure. - Persistence relies on adding passwords to existing consented service principals or creating new Entra ID applications named to mimic legitimate Office 365 services (T1098.001, T1036). Web shells handle C2 on compromised Azure VMs (T1505.003). - Collection targets email via EWS and MSGraph APIs, plus SharePoint (T1213.002) and OneDrive (T1213.003), all through OAuth apps with admin consent, a low-noise, API-native exfiltration path that bypasses many endpoint controls. #DFIR_Radar

• 
  Mila Carditis and 99 others (@GrainSurgeon) reported 57 minutes ago

  @Cryptos_Tales @anothercohen there's like 1200-1500 employees. some of those 30 are probably on medical or parental leave. some of the data might be broken/old laptops, some people may be using office365 from their personal machine...adding up those and all the other possible reasons, 30 is not much

• 
  Vlado Mamic (@vladomamic) reported 58 minutes ago

  Office 365 Fix

• 
  Nicholas Harris 🦖 (@_________4women) reported 58 minutes ago

  @DoWhatYouDo6 I thought they: 1. were serious about developing the next-gen XBOX console with AMD which was codenamed Project Magnus under the leadership of Sarah Bond. 2. the cost of RAM and SSDs skyrocketed so its specification was unaffordable and Satya Nadella quietly cancelled Project Magnus, but expected Sarah to lie to the community that they were still manufacturing hardware, to buy their engineers time to work on Windows 12 X and then have OEM bring out PCs that conformed to the Windows 12 X reference specification, that requires the AMD Magnus SoC which does Path Tracing. The initial spec. was 48 GB GDDR7 RAM which was probably for the dev kit, and since they are talking about using Neural Texture compression they might only need 32 GB for retail. However, this PC could cost as much as $4,000 and it would outperform self-builds that are $10,000 so that price, whilst unaffordable for XBOTs, is value for money for a consumer who is wealthy and could afford to buy more software, but realistically will tend to only play a couple of games (e.g. their Microsoft Flight Simulator, or Forza Horizon 6), so Microsoft need to get them through monetisation, although their real concern is to ensure a sale of Windows so that they don't lose customers of their Office 365 GroupWare to Linux business software, which could happen through SteamOS installs and not necessarily the Steam Machine itself. That is why Satya Nadella still bothers with gaming at all, because they need it as a Trojan Horse for their increasingly dog **** Operating System, which you won't notice is literal malware (spyware) because you spend most of your time in XBOX Mode that it lets you boot your computer straight into so the Operating System is kinda moot. Sarah Bond resigned because she had too much integrity to lie to XBOX fans. This pissed them off so she wasn't mentioned in their memo. 3. Asha was brought in by Satya to "acclimate" consumers on XBOX (on a variety of platforms and devices) to Copilot AI via the Gaming Copilot service. That backfired and consumers did not want that. Asha listened and "listening" characterised everything she did including Twitter polls to let fans choose: Xbox or XBOX and have a premature 25 anniversary showcase as they can't wait until 25th November 2026 to do that showcase. Maybe Phil Spencer will show up at an event in November and have a "rose tinted spectacle" nostalgic history of everything good that took place over 25 years (leaving out RRoD and DRM), but I doubt it. So, Asha was renaming Magnus to Helix with the justification it had Gaming Copilot integration, but it has lost that now, so what distinguishes it as a "project". It may be that she is talking about using AI to help port XBOX GDK code to their unified Windows GDK (so developers with PC make their games for Windows and there is no need to port what they make to XBOX or have an XBOX dev kit as the XBOX is a PC because Asha changed Microsoft Gaming to XBOX so all XBOX refers to is their games, services and microtransactions and not necessarily any console hardware at all). You then get the promotion of the AMD partnership at GDC 2026 and their commitment to Cross Progression and it becomes obvious that they are tripling down on encouraging their XBOX users with real money who are good customers who actually buy games (and aren't petulant whiny babies demanding all AAAs are Day One in GAME PASS and don't buy games through this service like Fatal Mephisto but rent everything for as long as it is available), to migrate to Windows 12 X. 4. Asha has said no one wants to pay $2000 for a console, so that led to speculation that they would imitate Google Stadia (only rent all the software/servers) and play on a Samsung TV without need of a console, but that requires an investment in racks of servers that need to be fully utilised to be economic, so unless they do something wild and buy Netflix my bet is on no next-gen XBOX console and expensive Windows 12 X PCs.

• 
  Professor Simon (@ProfSimonOnline) reported 60 minutes ago

  Did you know that personal devices can become gateways for corporate data breaches? A recent case revealed a malware attack that accessed Office 365 through a compromised BYOD. The fix? Continuous monitoring and behavior analysis! How secure is your work device? #CyberSecurity

• 
  Pimplefresh (@pimplefresh) reported 1 hour ago

  @RihardJarc Half of its market value is office 365. So you can cut that segment in half, thus reducing its market cap by 25%. I think that segment's going to go down even more