Open your Microsoft inbox without a full sign-in.
Use an OAuth refresh token and client ID to inspect folders, search messages and view email safely through Microsoft Graph.
Paste your Microsoft combo
The tool automatically finds the email, refresh token and client ID. Your password and optional alias are ignored.
- Outlook, Hotmail and Microsoft 365
- Pipe or colon-separated formats
- No account credentials saved
Sent only to our secured endpoint and Microsoft Graph for the active request. Closing this tab clears the browser session.
Messages 0
How to connect your Microsoft mailbox
You need three usable values: the mailbox email, the Application (client) ID of an app you control, and a refresh token issued to that same app with Microsoft Graph mail permission. Follow the authorized setup below if you do not already have them.
Check that this is your account
Only connect a Microsoft mailbox you own or are explicitly authorized to access. Never buy, copy or paste another person's token. A refresh token can grant continuing mailbox access and must be protected like a password.
Choose the correct format
Paste one line using either email | password | refresh_token | client_id or email:password:refresh_token:client_id. An optional alias may appear at the end.
Connect through Microsoft Graph
After the format is detected, select Connect & open inbox. Microsoft validates the token and confirms that it includes permission to read mail.
Read and search safely
Switch between available folders, search the loaded messages and open an email in the protected viewer. Scripts, forms, popups and external tracking images remain blocked.
Disconnect when finished
Select Use another combo, disconnect the mailbox, or close the browser tab. TempMail Cloud does not add these credentials to your saved mailboxes.
Get the required values through Microsoft's official OAuth flow
Ordinary Outlook settings do not display a refresh token. Microsoft issues it to a registered application after the mailbox owner signs in, grants consent, and the app requests offline_access. The token and client ID must come from the same app registration.
Register an app you control
Open the Microsoft Entra admin center, go to Identity → Applications → App registrations → New registration, choose the account types you need, and register the app.
Official app-registration guide ↗Copy the Application (client) ID
Open the app registration's Overview page. Copy Application (client) ID—not the Object ID, tenant ID or a secret. This GUID is the client_id used in your combo.
Configure authentication and Mail.Read
Under Authentication, add the correct platform and redirect URI for your own app. Under API permissions, add delegated Microsoft Graph Mail.Read. Use Authorization Code + PKCE or a Microsoft-supported MSAL flow; do not use password scraping.
Request consent with offline access
Sign in as the mailbox owner through your app and request openid offline_access https://graph.microsoft.com/Mail.Read. Microsoft returns an authorization code to the registered redirect URI. Your app exchanges that one-time code at Microsoft's token endpoint.
Copy the returned refresh token once
The successful token response includes refresh_token only when the flow and consent support it and offline_access was requested. Copy that value securely. Do not paste an access token, authorization code, client secret or account password in its place.
Build and test the combo
Use email | unused-password | refresh_token | client_id. The password slot exists only for compatible combo formatting and is ignored by this reader. If Microsoft rejects the request, re-run your app's interactive OAuth consent instead of trying random token values.
What you can do
- Open Outlook, Hotmail and Microsoft 365 inboxes
- Browse Microsoft mail folders
- Search sender, subject and message preview
- Read plain-text and HTML messages
- Refresh the current folder without reconnecting
How the reader protects you
- No combo database or account history
- Strict per-IP request limits
- Sandboxed HTML message viewer
- Remote image tracking blocked by default
- No password required by the reader
If the mailbox does not connect
Microsoft rejected the refresh token
The token may be expired, revoked, created for another client ID, or missing Microsoft Graph Mail.Read permission. Generate a valid OAuth token from the correct Microsoft application.
The combo is not detected
Keep the complete combo on one line and confirm that the email, refresh token and GUID-style client ID are present. Select the matching pipe or colon example above.
A folder or message is missing
Use the refresh control and check another folder. The reader loads the latest messages returned by Microsoft Graph and does not alter the source mailbox.
Can TempMail Cloud see my password?
The parser may encounter a password field in the pasted string, but it is ignored and is not used to authenticate. Only the client ID and refresh token are exchanged with Microsoft.