Microsoft Authenticator users are faced with a significant change, since the functions of the password management of the app are set, whereby all stored passwords are set for deletion on August 1. This step signals a large shift of the Tech giant to Passkeys, a digital authentication method that was praised by security experts as easier and safer for online registrations.
Passkeys aim to eliminate the need for complex, unforgettable passwords by using existing biometry such as face recognition or fingerprints, digital patterns or pens to grant access to the account. You work with a two-part encrypted code system: Half is secured by the user, often stored in the cloud using a compatible review app such as authenticator or on a physical security dongle, while the other lives with the accessed service or the accessed application. This dual-key approach significantly improves security. An important disadvantage, however, is the requirement to set up individual passkeys for any compatible service or any application. This can be a challenge for users who manage several accounts.
Microsoft’s justification for this pivot point is based on the increase in online security. In a recent blog post, the company emphasized the escalating threat from cyber attacks and explained: “Last year (2024) we watched astonishing 7,000 password attacks per second (more than twice as high as the rate of 2023). Although passwords have been available for centuries, let’s hope that your reign over our online world has ended.”
For those who have not yet changed, it is uncomplicated to set up a passkey within the authenticator app. Many users have already received a guided request in the past few months. If not, simply open the authenticator app on your device, tap your account and select the “Set up a Passkey” option. Then follow the instructions on the screen.
It is crucial that all of your old passwords remain synchronized with your Microsoft account. To access it after the deadline of August 1st, you must install the Microsoft Edge browser on your selected device and register. For iOS users, navigate to settings> General> Autofill & Passwords and activate Edge. Android users should change for settings> General Management> Passwords and AutoFill> AutoFill service and select Edge. Desktop and laptop users find their passwords by opening Edge and navigating them to settings> Profile> Passwords. Here you should also find an autofill switch and an option to save new passwords.
If you prefer to use another password manager, you can export your authenticator passwords. Open the authenticator app on your device and then navigate to settings> Export passwords. This generates an export file that contains your data. Most password managers, including those integrated in other browsers or the native key ring apps from Apple and Android, offer an import option to accept this file. If you encounter difficulties during the import process, it is advisable to consult the customer service lines of your selected password manager.
Although authenticator no longer manages passwords directly, it continues to serve as an important tool for multi-factor authentication, one-time passwords and biometric registration for passkey compatible services. The password management and autofill functions are now consolidated in the EDGE browser. It is important to note that not all websites and applications have completely taken over passkeys, which means that traditional passwords are still required in many online rooms. Users are encouraged to take measures to secure their digital login information from these changes.