Microsoft eliminates passwords for over 1 billion users

In the months leading up to March 2025, Microsoft has confirmed significant changes affecting over 1 billion users worldwide, aimed at enhancing account security. The company has taken a bold step towards completely removing passwords from accounts, citing that both forgotten and easily guessed passwords pose security risks. The increased frequency of password-related attacks, nearly doubling in the past year to 7,000 times per second, has influenced this decision. Microsoft intends to encourage users to adopt passkeys as a safer alternative, offering a streamlined signup process which only requires an email address and one-time code verification, eliminating the need for passwords. Furthermore, as part of the initiative, Microsoft has restructured its account sign-in process. Users will begin their accounts password-free and can set up a passkey afterward, reflecting a broader trend towards more secure authentication methods. Passkeys are highlighted as being three times faster than traditional passwords and more resilient against phishing attacks, emphasizing the growing need for robust security measures in today's digital landscape. Microsoft has articulated a clear goal: to transition to a future where accounts solely utilize phishing-resistant credentials, thereby reducing vulnerabilities. Despite this progressive move, Microsoft has expressed concern regarding the presence of passwords alongside passkeys, noting this could still leave accounts at risk. Other major platforms like Google have different policies, referring to passwords as backup credentials, which contradicts Microsoft's stance on a full transition to passwordless accounts. Microsoft's emphasis on a passwordless future aligns with ongoing discussions in the tech community regarding better security practices and highlights the urgency to eliminate vulnerabilities associated with traditional password usage. In summary, Microsoft is not just implementing a superficial change; it is advocating for a fundamental shift in how users manage their online identities and secure access to their accounts. As more users delete their passwords in favor of passkeys, this initiative exemplifies a significant shift in the approach to cybersecurity, led by one of the world's most influential technology companies.