Microsoft to Eliminate Passwords in Two Weeks: Transition to Passkeys

July 31, 2025
Microsoft to Eliminate Passwords in Two Weeks: Transition to Passkeys

In a significant shift in digital security protocols, Microsoft has announced that it will discontinue the use of passwords in its Authenticator app, effective in two weeks. This transition aims to enhance the security of user accounts by adopting passkeys, a more secure alternative that utilizes biometric data or PINs for authentication.

For years, the Microsoft Authenticator app has served as a reliable tool for managing multifactor authentication and saved passwords. However, as of August, the app will no longer support passwords, compelling users to adapt to a passkey system instead. This change is part of a broader industry trend towards eliminating passwords, which are often vulnerable to phishing attacks and other security threats.

According to a statement from Microsoft, "the shift to passkeys represents a significant step forward in improving security for our users. By leveraging biometrics and device-based authentication, we can reduce the risks associated with traditional passwords." The company emphasizes that passkeys, unlike passwords, are never stored on servers, making them inherently more secure.

Recent studies indicate that nearly 49% of U.S. adults engage in risky password practices, increasing their susceptibility to cyber threats. Security experts, such as Attila Tomaschek, CNET's software senior writer, have highlighted the importance of this transition. "Passwords can be cracked, whereas passkeys require both a public and a locally stored private key for authentication, thereby mitigating risks such as credential stuffing attacks," he stated in his analysis on July 18, 2025.

The implications of this change are significant. As organizations move towards passwordless authentication, users will need to become familiar with setting up and managing passkeys. Microsoft has outlined the process for transitioning to passkeys within the Authenticator app, which involves signing in with existing credentials and enrolling a passkey. The company advises users to begin this process as soon as possible to avoid disruptions.

In addition to Microsoft’s recommendations, experts suggest exploring alternative password management solutions during this transition. CNET's Tomaschek recommends Bitwarden for its open-source transparency and robust feature set, including password sharing and a password generator, available in its free plan. For a more user-friendly interface, 1Password is another viable option, favored for its family plan features.

The transition to passkeys not only improves individual account security but also reflects a larger trend in the tech industry towards more sophisticated authentication methods. As Microsoft and other tech giants continue to phase out passwords, users are encouraged to stay informed and proactive in adopting these new security measures.

As this new paradigm unfolds, it remains essential for users to understand the implications for their digital security, making the transition as seamless and secure as possible. The move towards passkeys is expected to shape the future of online security, potentially leading to a significant reduction in cyber threats as users become accustomed to this safer method of authentication.

For further guidance on setting up passkeys and selecting password managers, users can refer to resources available on CNET and Microsoft’s official blog.

Advertisement

Fake Ad Placeholder (Ad slot: YYYYYYYYYY)

Tags

MicrosoftAuthenticator apppasswordless authenticationdigital securitycybersecuritybiometric authenticationpasskeysAttila TomaschekBitwarden1Passwordpassword managementPINsfacial recognitionfingerprint authenticationFast Identity Online Alliancephishing attackscredential stuffinguser account securitytechnology trendsdata protectionsoftware securityonline safetymultifactor authenticationuser habitspassword securitycloud securitysoftware updatestech industryuser educationprivacy

Advertisement

Fake Ad Placeholder (Ad slot: ZZZZZZZZZZ)