Although the file A future without a password Still MethodsYou will soon be able to take a big step in this direction by entering a nuclear password on your Microsoft account. The company announced today that the password-free features it already offers to corporate customers will now be available to everyone.
Over the next few weeks, Microsoft will introduce passwordless life support in the Microsoft Authenticator app and the biometric-based Hello sign-in service for Windows. You’ll be able to set things up to use biometrics like your fingerprint, face scan, device authentication code, or verification code sent to your phone or email as a password replacement. Like the old login, the new system will allow you – and more than a billion other Microsoft account holders – to access services like Office 365 and OneDrive.
“The number of cyberattacks has increased as a result of identity and password theft — as defenders, we really have our business in this asymmetric game,” says Vasu Jakal, Microsoft Vice President of Security, Compliance, Identity and Management. “Without passwords, you get advanced security which is a lot easier. It’s just a slam dunk.”
Passwordless schemas use biometrics (something you are on) or things like hardware security keys (something you have) to confirm your identity; In other words, to authenticate you. In contrast, passwords are ‘something you know’, which becomes a problem when this information is ‘know’ or guessed by others. In passwordless systems, though, even the security codes sent to your phone are really “something you have” rather than “something you know,” because they require you to access your smartphone within a brief specified period of time.
This conceptual shift makes passwordless systems more secure in many ways, but people are so used to passwords after using them for decades that it’s sometimes hard to convince them to try something else. If you have invested time creating a file Password manager You may feel like a lot of the aggravation has disappeared from the whole situation anyway. Also, login without a password is very easy Feel Less secure just less hassle of looking at your webcam for a face scan or sticking a Yubikey into a USB port.
Even within Microsoft, it took years to design and implement an alternative architecture that completely eliminated the password rather than just adding more layers of defense on top of it.
“I remember it was 2017 and we started talking about whether we changed course instead of improving multifactor authentication just to remove passwords,” says Brett Arsenault, Microsoft’s chief information security officer. “I was just sitting there thinking, ‘Are these just words someone came up with from marketing? Then I thought, OK, if we really want to delete passwords, what are we going to do differently? It was like a light bulb on.”
Microsoft says it has more than 200 million passwordless users from rolling it out in the enterprise. And the company isn’t the only tech giant offering alternatives to password-login. However, it has a special impact, given that Windows and Office 365 are ubiquitous among corporate and individual customers.
To kill your Microsoft password forever, download the Microsoft Authenticator app and link it to your Microsoft account. Then go to account.microsoft.com, and choose sign in, and then Advanced Security Options. Under Extra safety research account without password and press his job. Follow the prompts and then accept the change from the Authenticator app.
That’s it. If you want to reverse the process, there is an option to add your password again. But who will miss her?
“You think everyone hates passwords, but there is one class of people who like passwords. They are called criminals,” says Arsenault.
More great wired stories