Microsoft to kill passwords in Authenticator by August 2025
- Microsoft plans to begin deleting passwords from its Authenticator app starting June 2025.
- From August 2025, users will lose access to saved passwords and any unsaved generated passwords.
- The shift indicates the end of the traditional password era, urging users to transition to more secure authentication methods.
In May 2025, Microsoft announced a significant change affecting its Authenticator app, which is widely used by millions of users globally, particularly those with Microsoft accounts. As part of its efforts to phase out traditional password usage, the company revealed that starting June 2025, users will no longer be able to save new passwords within the Authenticator app. This transition aims to boost security measures, as password-related attacks have surged over recent years, putting users at risk. Microsoft warns that by August 2025, all saved passwords and any generated passwords not saved will be deleted from the Authenticator app, signifying a major shift in the way users access their accounts. The company's solution to this imminent password elimination is to transition users to its Edge browser, where autofill functionality will continue along with the secure synchronization of saved passwords to users’ Microsoft accounts. In conjunction with this password deletion, Microsoft is taking additional steps to enhance security across its platforms. Users are advised to adopt passkeys instead of traditional passwords, as they offer a more secure and convenient alternative. Research indicates that a significant percentage of people find passkeys easier to use and more secure than traditional passwords. With over 35% of individuals having experienced account compromises due to password vulnerabilities, Microsoft emphasizes the urgency for users to act now to safeguard their accounts by upgrading to passkeys. The company encourages users to act quickly, as the deletion of stored passwords will occur in the near future, leaving little time to adjust to these changes. The initiative to remove passwords from Microsoft Authenticator reflects a broader industry trend aimed at enhancing digital security. As cyber threats continue to evolve and traditional passwords prove to be inadequate defenses against increasingly sophisticated attacks, many tech companies are exploring alternative authentication methods, such as biometrics and hardware-based security devices. This change is not without its challenges, as it requires users to adapt to new technologies and workflows while ensuring their accounts remain secured without the use of conventional passwords. Microsoft’s commitment to advancing security through innovative practices positions it at the forefront of the industry's shift away from password reliance towards more secure authentication methods. As this transition unfolds, users are reminded to stay informed about upcoming changes and take proactive steps to protect their accounts. The push for greater security leads to the necessity for users to remove SMS-based two-factor authentication (2FA) and utilize app or key-based code verification methods. With Microsoft leading the charge for password elimination, the company not only prioritizes its user security but also sets a precedent for competitors in the tech industry to follow, marking a significant turning point in cybersecurity strategy and user authentication processes.