Microsoft Warns Users to Delete Most Passwords

Delete Your Password Now

Microsoft wants you to add a passkey to your accounts. But it’s not enough. “Even if we get our more than one billion users to use passkeys, if a user has both a passkey and a password, and both grant access to an account, the account is still at risk.”

that’s why the Windows-maker is going all out to urge all users to delete passwords. “Our ultimate goal is to remove passwords completely,” the company says.”Millions of users have deleted thier passwords,” but most users are yet to make the move.

Here’s why. According to Check Point’s just released Brand Phishing Report, “Microsoft accounted for 40% of all brand impersonation attempts this quarter, holding its place as the most targeted company worldwide.” Put more simply, “cyber criminals are sticking with familiar names, and Microsoft remains their favorite disguise.”

The top three most impersonated brands are unsurprising – Microsoft, Google and Apple. Meta is missing from the list.

Strengthen Your Microsoft Account Security: Passkeys and Beyond

Microsoft is urging users to bolster their account security in the face of rising impersonation attacks. The company is prioritizing the adoption of passkeys – a more secure sign-in method – and advocating for stronger two-factor authentication (2FA) practices. With 40% of all impersonation attempts targeting Microsoft accounts, these changes are critical for protecting your data.

The Rise of Account Impersonation & Microsoft’s Response

Account impersonation,where malicious actors gain access to an account and pretend to be the legitimate owner,is a growing threat. Microsoft reports that a significant portion of these attacks specifically target their users. this has prompted the company to actively push for more robust security measures, recognizing the challenge of convincing a large user base to adopt new security behaviors. As Microsoft notes, they need to “convince an incredibly large and diverse population to permanently change a familiar behavior – and be excited about it.” (https://www.microsoft.com/en-us/security/blog/2024/12/12/convincing-a-billion-users-to-love-passkeys-ux-design-insights-from-microsoft-to-boost-adoption-and-security/)

What are Passkeys and Why are They Crucial?

Passkeys represent a significant leap forward in online security. Unlike conventional passwords, which can be stolen, phished, or cracked, passkeys are cryptographic key pairs. One key is stored on your device (like your phone or computer), and the other with the online service (in this case, Microsoft).

Here’s why passkeys are superior:

* Phishing Resistant: passkeys are tied to the website they were created for, making them useless to attackers who try to steal them through phishing schemes.
* impossible to Steal: The private key never leaves your device, eliminating the risk of it being intercepted.
* Easy to Use: Passkeys often utilize biometric authentication (fingerprint or facial recognition) or a device PIN, making sign-in seamless.
* Cross-Platform Compatibility: Passkeys are an open standard, meaning they work across different devices and platforms.

Strengthening Your Microsoft Account: A Three-Step Approach

Microsoft recommends a three-pronged approach to securing your account:

1. Add a Passkey: Create a passkey to your Microsoft account as a primary sign-in method. This is the most significant step you can take.
2. Upgrade Your 2FA: Replace SMS-based two-factor authentication with an authenticator app.SMS codes are vulnerable to interception through SIM swapping attacks. Popular authenticator apps include Microsoft Authenticator, Google Authenticator, and Authy.
3. Password Management: If you still maintain a password on your account, ensure it is strong and unique. A strong password should be at least 12 characters long and include a mix of uppercase and lowercase letters, numbers, and symbols. Alternatively,consider removing the password altogether if you’ve successfully implemented a passkey.

The Importance of a Passwordless Future

While passkeys offer a substantial security betterment, Microsoft emphasizes that relying on a weak password, even with 2FA, leaves your account vulnerable. The ultimate goal is to move towards a passwordless future, where passkeys and other advanced authentication methods eliminate the risks associated with traditional passwords.

By taking these steps, you can substantially reduce your risk of falling victim to account impersonation and protect your valuable data.