🔐Microsoft Makes Accounts Passwordless
Microsoft has announced a major security update: all new Microsoft accounts will now be created passwordless by default. This move aims to protect users from common password-based attacks such as phishing, brute force, and credential stuffing
New Microsoft accounts (personal, not business) will no longer require users to set or use a password. Instead, users will choose from several passwordless authentication options during sign-up
Microsoft is encouraging the use of passkeys, which leverage biometrics like fingerprints and facial recognition, as a more secure alternative to traditional passwords.
The updated sign-in and sign-up process is designed to be simpler and faster. Microsoft reports that this new approach has already reduced password usage by over 20% in their experiments
Existing Microsoft account holders can choose to delete their passwords and switch to passwordless authentication through their account settings
Microsoft, a member of the FIDO Alliance, is helping drive the adoption of passkeys as a standard method for secure, passwordless sign-in
Microsoft has added support for passkeys in personal accounts, integrated a passkey manager in Windows Hello, and is testing support for third-party passkey providers in Windows 11
Microsoft is making a significant push towards a passwordless future for personal accounts, aiming for greater security and a smoother user experience. This change is currently for new personal accounts only, not business accounts. The company hopes to eventually phase out passwords altogether as more users adopt passkeys and other passwordless methods