M365 workload

EWS to Microsoft Graph API migration: What it means for your Exchange backup

What's changing, what you need to do, and what to expect

Overview

In October 2026, Microsoft is retiring the EWS API that Keepit uses to back up Exchange data. Two things change:

  • Exchange connectors created before Keepit release 10.19 must be reauthenticated to grant new permissions.
  • Public Folders will no longer be supported — backup and restore stop in October 2026.

More details here.

⚠️ Action required

Reauthenticate your Microsoft 365 connectors with Exchange data before October 2026 to avoid backup gaps. 

Reauthentication is done from the Connectors page. After reauthenticating, your connector enters a migration queue: existing backups continue while the migration completes. 

Connectors created after release 10.19 are already ready and require no action. 

Public Folders: End of support

Microsoft's Graph API does not support Public Folders. From October 2026:

  • Backup and restore stop. 
  • Previously backed-up data remains available for browsing and downloading in the Deleted Items view.

If Public Folders is your only configured data type, your connector will show a critical health status.

Exchange: Reauthentication required

Reauthentication grants Keepit the new permissions required by Microsoft's Graph API. Which connectors need it:

Connector 

Action required? 

Created before Keepit release 10.19 

Yes, must reauthenticate 

Exchange added to an existing connector (any version) 

Yes, must reauthenticate 

Created after Keepit release 10.19 

No action needed 

<table class="wrapped confluenceTable">

<tbody class="">

<tr class="">

<td class="highlight-grey confluenceTd" data-highlight-colour="grey">

<p title=""><strong>Configuration</strong>&nbsp;</p>

</td>

<td class="highlight-grey confluenceTd" data-highlight-colour="grey">

<p title=""><strong>Backup?</strong>&nbsp;</p>

</td>

<td class="highlight-grey confluenceTd" data-highlight-colour="grey">

<p title=""><strong>Status</strong>&nbsp;</p>

</td>

<td class="highlight-grey confluenceTd" data-highlight-colour="grey">

<p title=""><strong>Impact</strong>&nbsp;</p>

</td>

</tr>

<tr class="">

<td class="confluenceTd">

<p>Exchange + other M365 data&nbsp;</p>

</td>

<td class="confluenceTd">

<p>Partial&nbsp;</p>

</td>

<td class="confluenceTd">

<p><strong>Unhealthy</strong>&nbsp;</p>

</td>

<td class="confluenceTd">

<p>Other data backs up; Exchange stops until reauthentication.&nbsp;</p>

</td>

</tr>

<tr class="">

<td class="confluenceTd">

<p>Exchange only, or Public Folders + Exchange&nbsp;</p>

</td>

<td class="confluenceTd">

<p>No&nbsp;</p>

</td>

<td class="confluenceTd">

<p><strong>Critical</strong>&nbsp;</p>

</td>

<td class="confluenceTd">

<p>All backups stop. Reauthenticate to resume Exchange backup.&nbsp;</p>

</td>

</tr>

<tr class="">

<td class="confluenceTd">

<p>Public Folders only&nbsp;</p>

</td>

<td class="confluenceTd">

<p>No&nbsp;</p>

</td>

<td class="confluenceTd">

<p><strong>Critical</strong>&nbsp;</p>

</td>

<td class="confluenceTd">

<p>Backup stops. Historical data&nbsp;remains&nbsp;available for browsing and download.&nbsp;</p>

</td>

</tr>

</tbody>

</table>

EWS to Microsoft Graph API migration: What it means for your Exchange backup

Backup size & continuity

After migration, your Exchange backup size may increase. This is expected: the Graph API stores emails in FTS format, which is larger than the MIME format used by EWS. 

Keepit will not re-back up existing data from scratch — only new changes are captured after migration. All previously backed-up data remains available for browsing, downloading, and restoring.

Restore after migration

Because EWS (MIME format) and Graph API (FTS format) are different, Keepit includes a built-in converter, which will automatically convert MIME-format data when you initiate a restore. This means that data backed up before and after the migration can both be fully restored.