Microsoft Authenticator will soon ditch passwords for passkeys – here's what to do

Those of you who use Microsoft Authenticator as a password manager will have to find another option, and soon. That’s because an upcoming change will pull the plug on the ability to use the Authenticator app to store and autofill passwords.

In a recent support document, Microsoft revealed the timeline for Authenticator’s retirement as a password manager. Starting in June, you’ll no longer be able to add or import new passwords in the app, though you’ll still be able to save passwords through the autofill option. Beginning in July, you’ll no longer be able to autofill passwords with Authenticator. Come August, any passwords you’ve saved in the app will no longer be accessible.

Also: 10 passkey survival tips: Prepare for your passwordless future now

Microsoft Authenticator isn’t going away. You’ll still be able to use it for its primary purpose, namely to generate and display multi-factor authentication codes for logging in to secure websites. But its sideline as a password manager will come to an end.

OK, but what should you do if you’ve been saving and using passwords in the app?

Microsoft offers a few suggestions. Your stored passwords are synced to your Microsoft account, which means you can still use them elsewhere. For that, you can turn to Microsoft Edge. In its support document, the company explains how to use Edge to autofill saved passwords. At the same time, you can use this opportunity to review your saved passwords to remove any you no longer need or want.

But Microsoft would really prefer that you start to renounce the dreaded password and move to the more evolved passkey. If you’ve already set up passkeys for your Microsoft account, Authenticator can serve as your passkey provider. If not, now might be the time to make the switch.

There’s a reason we all hate passwords. They’re hard to create and remember, vulnerable to cyberattacks and security threats, and challenging to juggle even with a password manager. In contrast, passkeys offer a more convenient and secure alternative. Authenticating yourself with a passkey requires a PIN, facial scan, fingerprint recognition, or physical security key, all of which are more robust methods than a password.

The main drawback of passkeys is that they can be difficult to sync across multiple devices, especially between a PC and a mobile device. However, using a central repository, such as Microsoft Authenticator, can help with that obstacle.

Also: The best password managers: Expert tested

The Microsoft document on “Register passkeys in Authenticator on Android or iOS devices” explains how to set up the Authenticator app to create passkeys for any supported account. Of course, you can use other programs to generate passkeys. I use my password manager to store passkeys for different sites and accounts, and the process is quick and easy. Plus, since I use my password manager on all my devices — PCs, mobile phones, and tablets — I can access the same passkeys everywhere.

With the deadline looming for Microsoft Authenticator’s retirement as a password manager, now is as good a time as any to start migrating to passkeys.

Get the morning’s top stories in your inbox each day with our Tech Today newsletter.