Microsoft Ends Authenticator Password Autofill
- Microsoft is discontinuing password autofill in Authenticator.
- Users must switch to passkeys or migrate passwords to Edge by August 1st to avoid losing access.
Microsoft will soon retire the password management functionality of its Authenticator app, a move that is part of a broader strategy to transition towards passkeys. This change, effective August 1st, will render all previously stored passwords inaccessible to users of the app. The company’s decision comes in response to an alarming increase in password attacks, which it reported had more than doubled in 2024. Microsoft hopes this shift away from passwords will make online experiences more secure. The company will instead integrate password management features into its Edge browser.
The Authenticator app will continue to serve as a multi-factor authentication tool for passkey-compatible services and websites. Passkeys represent a new security standard that uses biometric data, such as fingerprints or facial recognition, instead of traditional passwords. This method is considered both simpler and safer for users. The passkey system relies on a two-part encrypted code, with one half stored on the user’s device and the other on the service they are accessing. This dual-key structure enhances security significantly.
Transitioning to Passkeys and Edge
Users who want to adopt passkeys should do so before the August 1st deadline. The Authenticator app offers a straightforward, guided process for setting up these new digital keys. To get started, users need to open the app, navigate to their account settings, and select the “set up a passkey” option. This action will initiate a series of prompts that guide them through the configuration process for each compatible service. Setting up a passkey for every service or application is necessary, which might seem cumbersome at first but offers long-term security benefits.
Users who prefer to continue using traditional passwords will need to transfer their data to the Edge browser. After the August 1st deadline, passwords stored in Authenticator will only be accessible through Edge. Mobile users on iOS and Android must manually enable Edge as their autofill service in their device settings. Similarly, desktop users must ensure that autofill is activated within the Edge browser’s settings to access their saved credentials. This migration ensures users can maintain access to their passwords without disruption.
Exporting and Managing Your Passwords
For those who wish to move their passwords to a third-party password manager, Microsoft has provided a simple export function. Users can export their saved passwords by navigating to the Settings menu within the Authenticator app and selecting the “Export Passwords” option. This process generates a file containing all of the user’s password data. This file can then be imported into another password management service, allowing for a seamless transition.
There are numerous password manager services available, both free and paid, which offer a variety of security and convenience features. Users are encouraged to research and choose a service that best fits their needs. Many of these services, as well as the native keychains on Android and iOS, support direct import from the file generated by Authenticator. If any issues arise during the import process, it is recommended to contact the customer support of the chosen password manager for assistance.
The Push for a Passwordless Future
The move by Microsoft is part of a broader industry trend to eliminate traditional passwords. The FIDO Alliance, a consortium of major tech companies including Apple, Google, and Microsoft, has been instrumental in promoting this change. They developed the WebAuthn standard, which underpins passkey technology. This collaborative effort aims to create a more secure internet by replacing passwords with cryptographic keys, making phishing and other credential-based attacks significantly more difficult for hackers.
