Overview
- Microsoft blocked new password saves in June and disabled autofill support in July as part of its planned phase-out.
- From August, all passwords stored in Authenticator will be deleted unless users export them first.
- The app will continue to handle two-factor authentication and passkey sign-ins under FIDO Alliance standards.
- Microsoft reports blocking roughly 7,000 password attack attempts per second, highlighting the vulnerability of traditional credentials.
- Security advocates recommend adopting passkeys and using dedicated password managers for stronger, phishing-resistant logins.