Microsoft goes passwordless by default on new accounts

The Verge - May 1st, 2025
Open on The Verge

Microsoft is making a significant leap towards a passwordless future by setting new accounts to use secure methods such as passkeys, push notifications, and security keys by default. This initiative marks the biggest shift in Microsoft's passwordless journey as it introduces a streamlined sign-in experience with redesigned windows that prioritize passwordless options. While existing accounts can opt to remove passwords, new users will start without them, favoring more secure alternatives. This move aligns with Microsoft's broader security goals, as reflected in its renaming of "World Password Day" to "World Passkey Day."

The company's decision to embrace passwordless technology is driven by the increasing success of passkey usage. Microsoft reports nearly a million passkeys registered daily, with a 98 percent success rate in sign-ins compared to the 32 percent success rate for traditional password-based accounts. The shift highlights a growing industry trend toward enhanced security measures and user convenience. By eliminating the need for passwords, Microsoft aims to reduce security vulnerabilities and enhance user experience, setting a precedent for other tech companies in the cybersecurity landscape.

Story submitted by Fairstory

RATING

7.0
Fair Story
Consider it well-founded

The article provides a clear and timely overview of Microsoft's move towards passwordless authentication, highlighting the benefits of increased security and user convenience. It accurately reflects Microsoft's initiatives but lacks external verification and critical perspectives, which limits its depth and balance. The story is well-written and accessible, though it could benefit from more detailed explanations of technical terms. While it addresses a topic of public interest, its impact and engagement potential are constrained by its focus on Microsoft's perspective. Overall, the article is informative and relevant but could be strengthened by incorporating a broader range of sources and viewpoints.

RATING DETAILS

8
Accuracy

The story presents several factual claims about Microsoft's move towards a passwordless future. The claim that new Microsoft accounts will be 'passwordless by default' is accurate and supported by Microsoft's official blog. The story's assertion about the redesigned sign-in window aligns with Microsoft's announcement of a new user experience, although specific details about 'reordered steps' are not explicitly verified in the available sources. The renaming of 'World Password Day' to 'World Passkey Day' is not confirmed in the sources, indicating a need for further verification. The statistic of 'nearly a million passkeys registered every day' and the '98% success rate for passkey logins' are not directly sourced, suggesting these might be extrapolated from internal data not publicly cited.

7
Balance

The article primarily focuses on Microsoft's initiatives and presents a positive perspective on the shift to passwordless technology. It highlights the benefits of this transition, such as increased security and ease of use. However, the article does not explore potential challenges or criticisms of going passwordless, such as possible user resistance or technical issues. Including perspectives from cybersecurity experts or user testimonials could provide a more balanced view.

8
Clarity

The article is generally clear and concise, with a logical flow that guides the reader through Microsoft's initiatives. The language is straightforward, making complex topics like passwordless authentication accessible to a general audience. However, some technical terms, such as 'passkeys' and 'FIDO2 security keys,' could be better explained to enhance understanding for readers unfamiliar with cybersecurity concepts.

6
Source quality

The article appears to rely heavily on information directly from Microsoft, which is a credible source for its own initiatives. However, the lack of external sources or expert opinions limits the depth of analysis. The story would benefit from third-party verification or commentary to enhance its reliability and provide a more comprehensive view of the implications of Microsoft's passwordless strategy.

6
Transparency

The article does not clearly disclose the sources of its statistics or the basis for its claims, such as the '98% success rate for passkey logins.' While it references Microsoft's initiatives, the lack of explicit citations or links to original sources reduces transparency. Providing direct references or links to Microsoft's announcements or relevant studies would improve transparency and allow readers to verify the information independently.

Sources

  1. https://www.microsoft.com/en-us/security/blog/2025/05/01/pushing-passkeys-forward-microsofts-latest-updates-for-simpler-safer-sign-ins/
  2. https://learn.microsoft.com/en-us/entra/identity/authentication/concept-authentication-passwordless
  3. https://learn.microsoft.com/en-us/windows/security/identity-protection/passwordless-strategy/
  4. https://techcommunity.microsoft.com/blog/microsoft-entra-blog/new-user-experience-for-consumer-authentication/3822035
  5. https://learn.microsoft.com/en-us/entra/identity/authentication/howto-authentication-temporary-access-pass