Microsoft to Begin Password Deletion in Just 8 Weeks

Microsoft has confirmed that it will remove all saved passwords from its Authenticator app starting in August 2025. This is part of the company’s broader initiative to transition to a passwordless future, placing greater emphasis on more secure login methods, particularly passkeys,according to Forbes.

Timeline of Key Changes:

June 2025: The ability to save new passwords in the Authenticator app will be removed.

July 2025: Autofill for saved passwords and payment information will be disabled.

August 2025: All stored passwords, including unsaved generated ones, will be permanently deleted.

To support users during this transition, Microsoft is encouraging people to transfer their saved credentials to Microsoft Edge, which will continue to support password and autofill features linked to the user's Microsoft account.

Why the Change?

Microsoft cites growing security threats as the primary reason for this shift. Passwords remain one of the most vulnerable components in digital security. Attackers increasingly use phishing campaigns to target password-based login systems. A notable example involves hackers leveraging Google Apps Script to generate fake Microsoft login pages, which can be hard to detect on mobile devices.

These rising threats have pushed Microsoft to prioritize phishing-resistant technologies. Passkeys, a key part of this strategy, are cryptographic credentials that eliminate the need for traditional passwords. They are designed to be more secure and user-friendly, offering protection against common attacks like phishing and credential stuffing.

What You Should Do:

1. Export or transfer important password and payment information to Microsoft Edge or a reputable password manager.

2. Begin using passkeys for services that support them. Microsoft Authenticator will continue to support this feature.

3. Replace SMS-based two-factor authentication with app-based or device-based authentication for better security.

The Future of Authentication

Microsoft’s decision is aligned with industry-wide efforts led by the FIDO Alliance to eliminate passwords in favor of more secure alternatives. Passkeys are already supported by leading platforms including Microsoft, Google, and Apple. This change marks a significant step toward a safer and more streamlined digital experience.