Microsoft has officially made all newly created accounts passwordless by default, ushering in a major shift in how users authenticate their identities across the company’s services. The announcement, timed to coincide with this week’s World Password Day—now also recognized by Microsoft as “World Passkey Day”—represents a significant milestone in the tech giant’s broader effort to phase out traditional passwords in favor of more secure, user-friendly alternatives.
Passwordless by Default: What New Users Can Expect
Under the new system, users signing up for Microsoft accounts will no longer be prompted to create a password. Instead, they’ll be directed to use passwordless authentication options such as passkeys, biometric verification through Windows Hello, or physical security keys. The system automatically detects the most secure available method for each device and encourages users to enroll accordingly.
This new onboarding experience aims to streamline secure access from the start, eliminating the most vulnerable link in the authentication chain: the password itself.
This rollout builds on several prior initiatives. In July 2024, Microsoft made multi-factor authentication mandatory across Azure, and in early 2025, it added native passkey support to the Microsoft Authenticator app. These changes reflect Microsoft’s commitment to passwordless authentication as a foundational pillar of modern digital security.
Responding to Soaring Password-Based Threats
The urgency of this shift is driven by alarming security data. Microsoft says it intercepted more than 7,000 password attacks per second over the past year, with the vast majority targeting legacy password-based login systems. By eliminating passwords altogether for new accounts, Microsoft aims to substantially reduce the attack surface for phishing, brute-force login attempts, and credential stuffing.
For existing Microsoft account holders, the company still offers a migration path to passwordless access. Users can manually delete their password via account settings and adopt a passwordless login method, such as a passkey or biometric prompt, at their own pace. Microsoft emphasizes that these methods not only improve security but also enhance usability, often allowing users to sign in more quickly and with less friction than with traditional passwords.
This move also reflects a broader industry trend. According to the FIDO Alliance, billions of user accounts now support passkeys, and 2025 is expected to bring major breakthroughs in their adoption across sectors like banking, payments, and travel. Microsoft’s aggressive adoption of passkeys sets the tone for large-scale consumer-facing platforms.
Sources: Tech Monitor, Help Net Security, Tom’s Guide
—
May 2, 2025 – by the ID Tech Editorial Team
