
Microsoft Issues Urgent Warning to Over 1 Billion Users: Say Goodbye to Passwords!
2025-03-29
Author: Sophie
In a groundbreaking announcement, Microsoft has confirmed that it will eliminate passwords for over one billion users, a move that could significantly enhance online security. The company warns users that traditional passwords 'could be easily forgotten or guessed by an attacker.' Thus, it is now essential to phase out passwords entirely.
'The password era is ending,' Microsoft stated back in December. The urgency of this shift has been underscored by a sharp increase in password-related attacks, with the tech giant blocking nearly 7,000 such attempts every second—a figure that has nearly doubled from the previous year. Microsoft is firmly committed to promoting the adoption of passkeys, a more secure alternative to passwords.
So, what exactly is a passkey? Functions like a password, a passkey replaces both passwords and two-factor authentication codes, linking account access to hardware devices, often relying on biometrics like fingerprints or facial recognition for verification. This method ensures that passkeys are less vulnerable to theft or interception.
The latest update from Microsoft enhances its sign-in processes. By the end of April, users will experience a revamped sign-in and sign-up procedure across their web and mobile apps. New users will only need to enter their email address and verify it with a one-time code, eliminating the need for a traditional password right from the start. The new system is engineered with a focus on usability and security, aiming for a seamless passwordless experience.
Once logged in, users will be prompted to create a passkey, with passkeys becoming the default sign-in method wherever possible. Microsoft emphasizes that this transition is not merely an improvement but a necessary step to mitigate phishing risks. Keeping both passkeys and passwords active can still expose users to potential security threats.
Amid rising concerns over AI-driven attacks and compromised two-factor authentication, the urgency to eliminate passwords becomes even more critical. 'Our ultimate goal is to remove passwords completely and support accounts with only phishing-resistant credentials,' Microsoft asserts, revealing that millions of users have already deleted their passwords.
The FIDO (Fast Identity Online) Alliance has been on a mission to eradicate password dependence for over a decade. Andrew Shikiar, CEO of FIDO Alliance, heralded Microsoft's decision as a pivotal moment, allowing users to benefit from user-friendly, secure passkeys.
However, the path to widespread adoption remains a challenge. While Microsoft leads the way, other tech giants like Google continue to promote the option of passwords as a backup mechanism, which could perpetuate security vulnerabilities. The tech community eagerly awaits a similar commitment from other major providers to phase out passwords.
Despite the momentum towards passkey adoption—as evidenced by a notable 50% increase in passkey familiarity over the past two years—Microsoft has faced some criticism. They've also recently removed a popular command line feature that previously allowed users to bypass the Microsoft Account connection during Windows 11 setup, a change that may not sit well with all users.
As we navigate this pivotal moment in internet security, Microsoft's proactive measures could serve as a model for others, potentially ushering in a new era devoid of traditional passwords. The question remains: could we be witnessing the dawn of a safer, more secure internet experience?