Basic Auth SMTP Removed in 2026: Are Your Scan-to-Email and Print Emails at Risk ?
In January 2026, Microsoft confirmed a major update to strengthen Exchange Online security : the gradual removal of Basic Auth (username + password) authentication. This change directly impacts scan-to-email and email printing workflows used by many businesses via Microsoft 365.5.
Why Is Microsoft Removing Basic Auth?
Basic Auth SMTP is an old technology dating back to the 1990s that transmits credentials in an insecure way. This exposes organizations to several major risks:
- Brute force and password spray attacks: hackers can test millions of password combinations very quickly.
- Credential theft: usernames and passwords can be intercepted and reused across other services.
- Limited support for MFA (multi-factor authentication): Basic Auth does not allow modern security protections to be applied easily
Microsoft explains that this legacy method makes it easier for accounts to be compromised and for unauthorized access to data. By removing Basic Auth, Microsoft strengthens overall security and encourages the adoption of modern protocols such as OAuth 2.0.: Deprecation of Basic authentication in Exchange Online)
This decision is part of Microsoft’s broader strategy to make Microsoft 365 more resilient against growing cyber threats.
Official Timeline
Until the end of December 2026: everything continues to work normally.
End of December 2026: Basic Auth will be disabled by default (temporarily reactivatable by admins).
Second half of 2027: permanent removal.
Which Gespage Features Are Affected ?
Two key Gespage features rely on sending and receiving emails via Microsoft 365:
- Scan2Me (scan to email): scanning from the printer terminal and sending directly by email.
- Notifications (print via email): sending notification emails related to print jobs.
Without action, these workflows may be blocked starting at the end of 2026.
Good News: Gespage Has Been Ready for Years !
Since version 8.2.7(available since 2023), Gespage natively supports OAuth 2.0 for SMTP (sending) and IMAP (receiving).
Key Benefits:
- No heavy software updates required.
- All features continue to work exactly as before, but with much higher security.
Conclusion: Why This Change Is Positive for You
By switching to OAuth 2.0 with Gespage, you get a modern, security-compliant solution without compromising the ease of use of Scan2Me
