Microsoft Confirms Password Deletion—Now Just 8 Weeks Away

Microsoft is urging its users to transition away from passwords and adopt passkeys due to increasing password-related attacks and vulnerabilities, including a new phishing attack that leverages Google Apps Script to mimic Microsoft authentication interfaces. As part of this shift, Microsoft will be deleting saved passwords in Authenticator starting in August 2025 and is encouraging users to migrate to Microsoft Edge for password management or, ideally, switch to passkeys for enhanced security, while also removing SMS-based two-factor authentication.

Analysis

Microsoft is aggressively phasing out traditional password reliance for its extensive user base, citing the escalating landscape of password-related cyberattacks and the inherent vulnerabilities of password-based security. The company has announced a clear timeline for sunsetting password management features within its Authenticator app, beginning June 2025 with the cessation of new password saving, followed by the disabling of autofill in July 2025, and culminating in the inaccessibility of saved passwords by August 2025. This strategic pivot aims to transition users towards Microsoft Edge for password management as an interim step, but more significantly, towards the adoption of passkeys, which Microsoft advocates as a superior security standard. This initiative is underscored by a new phishing attack exploiting Google's App Scripts to create deceptive Microsoft login interfaces, highlighting the persistent and evolving threats. FIDO research supports this shift, indicating that over 35% of individuals have experienced account compromises due to password issues, while a majority familiar with passkeys perceive them as more secure and convenient. The overall sentiment surrounding this news is moderately negative, reflecting the inherent risks and user friction associated with such a significant security overhaul, with Google's platform involvement in the new phishing vector also contributing to negative sentiment for Alphabet (GOOGL, GOOG). Microsoft's explicit advice is to not merely migrate passwords from Authenticator but to fundamentally upgrade account security to passkeys, thereby eliminating legacy vulnerabilities, especially as basic two-factor authentication methods are increasingly bypassed.

Key Decisions for Investors

• Investors should monitor Microsoft's (MSFT) execution of this transition, particularly user adoption rates of passkeys and Edge for password management, as success could strengthen its ecosystem's security posture but also presents user experience challenges.
• Consider the competitive implications for browser usage, as Microsoft's strategy directly incentivizes migration to Edge, potentially impacting market share and associated revenue for Microsoft and competitors.
• Evaluate the cybersecurity sector for opportunities, as the broader industry shift away from passwords towards passkeys, underscored by Microsoft's move, will likely drive demand for advanced authentication solutions and threat mitigation technologies.