Big changes are coming to the Microsoft Authenticator app, and if you use it to store your passwords, you need to pay attention. Microsoft is phasing out password support in Authenticator, pushing users towards a more secure future with passkeys. This means deadlines are approaching quickly to either export your saved passwords or switch to passkeys.
Contents
Here’s the rundown:
- Starting in July, Authenticator’s autofill feature for passwords will stop working.
- By August, passwords saved in the Authenticator app will be removed.
- Microsoft is doing this to accelerate the shift from vulnerable passwords to more secure passkeys.
- You need to export your passwords or start using passkeys for your accounts soon.
Microsoft headquarters building facade, symbolizing the company's move towards a passwordless future with passkeys.
What’s Changing in Microsoft Authenticator?
If you rely on Microsoft Authenticator for more than just generating those one-time codes for two-factor authentication (2FA), you’ll see two major features disappear soon:
- Autofill Stopping in July: This is the first change you’ll notice. If you’ve been using Authenticator to automatically fill in your saved usernames and passwords on websites and apps on your phone, that functionality is going away in just a few days.
- Saved Passwords Removed by August: This is the more critical change. Microsoft has announced that from August onwards, passwords you have stored directly within the Authenticator app will no longer be accessible. Any passwords you’ve generated but not saved will also be deleted. This gives you a tight deadline to move your passwords elsewhere if you still need them.
Why Is Microsoft Doing This? The Push for Passkeys
Microsoft is making these changes as part of a clear move away from traditional passwords, calling out that “the password era is ending.” The simple reason is security. Passwords are, frankly, a weak point in online safety. They can be guessed, stolen in data breaches, or tricked out of users through phishing attacks. Online criminals are very good at getting their hands on passwords.
Microsoft, along with many other tech companies, sees passkeys as the future of secure sign-ins. Think of a passkey as a unique digital credential linked securely to your device (like your phone or computer). When you sign in with a passkey, your device uses cryptography to verify your identity with the website or app, without ever sending a password that could be intercepted or stolen. This makes passkeys much more resistant to phishing and data breaches than traditional passwords.
Microsoft believes that by removing password features from Authenticator, they can help accelerate user adoption of the more secure passkey technology.
Your Next Steps Before August
If you currently have passwords saved in Microsoft Authenticator, you need to act quickly. You have a couple of main options:
Option 1: Export Passwords to Another Manager
The most direct action is to export your saved passwords from Authenticator. You can then import them into a different password manager app or service. Popular choices include:
- Google Password Manager: Built into the Chrome browser and Android devices.
- iCloud Keychain: Apple’s integrated password management for iPhone, iPad, and Mac users.
- Various third-party password managers like Bitwarden, LastPass, 1Password, etc.
Exporting lets you keep using autofill features through your new password manager. However, it’s important to remember that you’re just moving your password problem elsewhere – you’re still relying on passwords, which carry inherent security risks compared to passkeys.
Option 2: Start Using Passkeys (Recommended)
The more secure option, and the one Microsoft is pushing for, is to start replacing your passwords with passkeys wherever possible.
Many major online services now support passkeys, including Microsoft itself, Google, Facebook, and more. Setting up a passkey usually involves a simple process on the website or app, linking your account to a passkey stored securely on your device (often protected by your phone’s unlock method, like fingerprint or face scan).
If you have set up passkeys for your Microsoft Account, Microsoft confirms that the Authenticator app will continue to support them. In fact, you’ll need to keep Authenticator enabled if you’re using it as your passkey provider for your Microsoft account.
Why Passkeys Are Better
The move away from passwords is significant because passwords are a weak point for many people. Statistics show a surprising number of people still use simple, easily-guessed passwords or reuse the same password across multiple different websites. Adding to the risk, less than half of users consistently use two-factor authentication. Relying solely on passwords leaves your online accounts vulnerable to being compromised.
Passkeys eliminate many of these risks because there’s no password for attackers to steal, guess, or phish from you. The login process relies on secure keys and your trusted device.
Conclusion
Microsoft’s upcoming changes to the Authenticator app are a clear signal that the tech world is moving towards a passwordless future powered by passkeys. While it requires users to take action now to secure their saved passwords, it’s ultimately a step towards significantly stronger online protection against common threats like phishing and data breaches.
Don’t wait until the August deadline. Take the time now to review your saved passwords in Microsoft Authenticator and decide whether to export them to another password manager or, ideally, start making the switch to the more secure passkey technology for your key online accounts.
