Microsoft says they'll soon stop sending SMS codes for authentication for personal Microsoft accounts and will transition to "passwordless accounts, passkeys, and verified email."
Will they still use SMS for light-KYC™ tho?
I assume this means the password and app based TOTP will also be phased out? Very annoying.
They only confirmed that SMS is going away.
Yeah I am just wondering if they are moving towards these methods if they will just remove the password workflow entirely though. I feel this would be on brand for Microsoft.
I understand passkey is supposed to be better, but I could do without it. Healthequity, an HSA provider at my old job, did a rug pull and forced everyone in to using it through their app and it’s left a bad taste in my mouth ever since.
If you look at the current state of passkey support on operating systems, there’s still a lot of missing features on most of them, even on Windows. A lot of password managers also don’t properly support all the features of passkeys yet. So given that I doubt they’re going to fully remove passwords altogether yet.
I hated eggplants for decades. One day, I traveled to Eastern Mediterranean countries and discovered that I actually loved it. The reason was just that, in my family, nobody had ever known how to cook it right.
Time to shift to resident keys on yubikey