Resources > The End of Passwords
The End of Passwords: Microsoft Forces Passkeys by August 2025
Password and lock graphic | Credit: Freepik
Microsoft Is Deleting Saved Passwords
Here’s What You Need to Know Before August 2025
We’ve heard for years that passwords are a weak link in cybersecurity, and now Microsoft is taking action. In a bold move, the tech giant has officially announced it will phase out password support within Microsoft Authenticator by August 2025, pushing users toward passkeys and more secure authentication methods.
According to Microsoft, the “password era is ending.” This announcement comes amid a sharp rise in password-related attacks and widespread data breaches exposing hundreds of millions of login credentials. Hackers know that traditional passwords are nearing their end, which is why these types of attacks are escalating. Microsoft is urging users to make the switch now before they’re left vulnerable.
What’s Changing in Microsoft Authenticator?
Microsoft’s decision affects anyone using the Microsoft Authenticator app to store, autofill, or generate passwords. Key dates to remember include:
June 2025: You will no longer be able to save new passwords in Authenticator.
July 2025: Autofill for saved passwords will be disabled within the app.
August 2025: All saved passwords will be permanently deleted. Any generated passwords that were not saved will also be removed. Additionally, any stored payment information will be deleted from your device.
Microsoft is already displaying in-app warnings and splash screens urging users to move their data. If you’ve been relying on Authenticator for password management, the clock is ticking.
Where Should You Move Your Passwords?
Microsoft is guiding users to transition their password management to Microsoft Edge, the company’s web browser. Edge can store your login credentials, payment methods, and addresses securely under your Microsoft account. It also offers built-in autofill, syncing across devices, and integration with Microsoft Defender for added protection.
However, Microsoft is not just offering a simple migration path it’s promoting a complete shift away from passwords altogether. Their recommendation is to use passkeys instead.
Why Is Microsoft Abandoning Passwords?
It’s no secret that passwords are outdated. Weak, reused, or stolen passwords are still the #1 cause of data breaches. Cyber attackers are exploiting every vulnerability they can find, from phishing emails to fake login pages that mimic Microsoft and Google sign-in screens.
A recent attack, highlighted by Cybersecurity News, uses Google App Scripts to spoof Microsoft’s authentication interface, tricking users into entering their real credentials into fake login windows. These types of attacks are growing more sophisticated and more frequent. Even traditional two-factor authentication (2FA) methods like SMS codes are no longer enough.
In this context, Microsoft’s move isn’t just a product update, it’s a response to an evolving threat landscape.
The Rise of Passkeys
Passkeys are a passwordless sign-in method based on public-key cryptography. Instead of remembering a string of characters, users log in with a fingerprint, face scan, or device PIN. The result? A faster, more secure, and phishing-resistant login experience.
According to FIDO Alliance, which develops passkey standards:
- 35% of users have had at least one account compromised due to password issues.
- 54% of users familiar with passkeys say they are more convenient than passwords.
- 53% believe passkeys offer better security.
Microsoft has already added passkey support to its accounts, as has Google. If you haven’t enabled passkeys on your critical accounts yet, now is the time.
What You Should Do Next
To avoid losing access to your passwords and to secure your accounts properly, follow these steps:
-
Export Your Saved Passwords: Go to the Microsoft Authenticator app and export your saved credentials before August 2025.
-
Switch to Microsoft Edge (or another trusted password manager): Import your saved logins into Edge or a reputable password manager like 1Password, Bitwarden, or Dashlane.
-
Enable Passkeys Where Available: Set up passkeys for your Microsoft, Google, and other major accounts. This usually involves setting up biometric authentication or a device PIN on supported devices.
-
Stop Using SMS 2FA: Move to app-based two-factor authentication or hardware security keys like YubiKey. SMS-based codes can be intercepted or spoofed.
-
Keep Up With Security Updates: Pay attention to new security advisories from Microsoft and other tech providers. The landscape is changing quickly.
Why This Matters
Microsoft’s plan to delete passwords is a security wake-up call. The threat of credential theft and phishing is only increasing, and outdated login methods leave millions of people exposed. While this change may seem inconvenient at first, it’s part of a broader push to make digital identity safer and easier to manage.
Whether you’re a casual user, a business owner, or a tech professional, now is the time to review your security practices. Don’t wait until August 2025 to find out you’ve lost access to important logins, or worse, become a victim of a cyberattack that could’ve been prevented.
Need Help Making the Switch?
Our cybersecurity team can walk you through setting up passkeys, choosing a secure password manager, and updating your account protections. Contact us here.