Old Password Continues to Work in Outlook After Password Change

Same here. It seems like somebody dropped the ball BIG time on this one. Especially with this being such a MAJOR security breach. I have four devices (two iphones, ipad, & macbook pro) that are still connecting to mail with the old password using the Apple Mail app. But, when I go to log into myAT&T or Yahoo it requires the new password. This is happening on two different email accounts. It even asked for the new password using the U-verse app as well as the myAT&T app so it is working to some extent. The passwords were changed through the att.com website. What's up with that? Where is the security? Where do we go from here?

I am having the same exact problem. I changed my att.net password on their website (https://www.att.net/email) and this new password is what is required for accessing ATT webmail. However,my Microsoft Outlook email client on the pc still needs to use the OLD password only. If I configure Outlook to use the new password, it is rejected by the mail servers. Also, if I log onto https://mail.yahoo.com to reach the exact same email account, I must use the OLD password. I had a chat session with ATT support and they said that many are having this problem right now. They promised to get back to me with a solution or further instructions. i agree with Audiojunkie that someone dropped the ball bigtime because we have hashed emails that have been hacked on millions of accounts, and yet some users cannot get them changed on at least some of the mail servers. I hope they figure out how to get our passwords synchronized across all the mail servers and soon.

When I signed up with ATT U-verse as my ISP about 6 years ago, I got an att.net email address which was routed through Yahoo mail servers, even though I never had a Yahoo email address. Due to the recent notice about the security breach, I changed att.net email password by logging onto www.att.com “MyATT” account profile. After that I noticed that if I logged onto https://www.att.net/email or https://loginprodx.att.net I needed to use my NEW password. However, if I logged onto https://mail.yahoo.com or https://login.yahoo.com then I needed to use my OLD password. Furthermore, my Microsoft Outlook mail client still needed to use the OLD password. (Outlook is configured for a POP3/SMTP mail account with inbound.att.net (port=995), outbound.att.net (port=465), SSL enabled.

Whether I log onto email through https://loginprodx.att.net using the NEW password or through https://mail.yahoo.com using the OLD password, I get the same inbox and the webmail URL in the address bar is https://mg.mail.yahoo.com/neo/launch?.partner=sbc&.rand=< numbers/chars different for each login> however I have to use either the NEW or the OLD password depending on how I get to the webmail site. Of course I wanted both of these web portals to use the same NEW password because the OLD hashed password was involved in the big Yahoo hack of 2016. After a couple of days experimenting, I found a solution that synchronized the NEW password to both sites. I hope it can work for you, but results may differ depending on your situation.

The Fix:

I logged onto the Yahoo website https://login.yahoo.com . Only my OLD password was accepted at the login screen:

Next, at the Yahoo landing page, I clicked the MAIL icon on the upper right (picture of an envelope). This brought up the att.net webmail interface I mentioned above with URL https://mg.mail.yahoo.com/neo/launch?.partner=sbc&.rand=<numbers/chars different for each login>

There is a face/silhouette icon on the upper right of the mail page. Hovering the mouse over it, a menu appears. I clicked “Account Info”. This took the browser to https://edit.yahoo.com/config/eval_profile which displayed account profile information. Under the section “Sign-In and Security” I clicked “change your password”. This brought the browser to the ATT website https://www.att.com/olam/passthroughAction.myworld?actionType=ProfileChangePwd with the following email password change form:

I had to use my NEW password in the “Current Password” field, and for the “New Password” field, I entered a different and NEWER password. Then clicking “save changes”, the NEWER password became the only valid password, and it was now synchronized between logging in from https://www.att.net/email , https://login.yahoo.com , or Microsoft Outlook mail client on the PC (once I configured Outlook to use the NEWER password, that is). Maybe this worked because I had initiated this password change process by first logging into https://login.yahoo.com instead of https://www.att.net/email . This may be the result of my att.net mail account residing on Yahoo mail servers, not ATT servers?

While discussing these issues with an ATT Chat technician, he had suggested navigating directly to https://edit.yahoo.com/config/eval_profile the account profile page I described above, and to change the password from there. That would bypass having to first log into https://login.yahoo.com and if it works, would involve fewer steps.

Have done all the steps 2muchcomputer listed - multiple times - but it always bumps me back to having to change the Yahoo password thru ATT, which leaves the same problem - old password is the only one that works for e-mail client/direct sign-in to Google...  Hope we'll be notified when this is (PROMPTLY) remedied...