Microsoft is making a significant shift in how users secure their personal accounts, moving away from SMS codes in favor of more secure methods like passkeys and verified emails. This change affects users of services such as Outlook, OneDrive, Xbox, Windows, and Microsoft 365.
Security Concerns Drive Change
For years, SMS codes have been a staple for two-factor authentication, providing an additional layer of security beyond passwords. However, these codes have become increasingly vulnerable to fraud. Criminals have exploited weaknesses through methods such as SIM-swap scams and phishing attacks, leading to unauthorized access to personal accounts.
Microsoft’s decision to phase out SMS codes is driven by these security concerns. The company highlights that once a criminal gains access to an account, they can potentially read emails, reset passwords, and access private files. The traditional SMS code system, once considered robust, now poses significant risks due to its susceptibility to interception and theft.
Introducing Passkeys
In response, Microsoft is encouraging users to adopt passkeys, which provide a more secure and user-friendly authentication method. Passkeys utilize cryptography, with one part stored by Microsoft and the private part remaining on the user’s device. This setup makes passkeys much harder to steal compared to SMS codes.
Passkeys offer the convenience of signing in using biometric data like fingerprints or facial recognition, or a device PIN. This method not only enhances security but also simplifies the login process, eliminating the need to wait for a text message that might never arrive.
Guidance for Users
Microsoft is guiding users through this transition by recommending the addition of a verified email and the setup of a passkey. While the change may initially seem inconvenient, it is a necessary step to protect users’ digital lives from increasingly sophisticated cyber threats.
Users are advised to ensure their recovery email is current and accessible, remove outdated phone numbers from their accounts, and consider using Microsoft’s Authenticator app for additional security. Backup codes should be stored securely, and a password manager can still play a crucial role in managing strong passwords and avoiding phishing attempts.
As technology evolves, so must our security practices. Microsoft’s move away from SMS codes is a proactive step towards safeguarding personal information in an increasingly digital world.
Original reporting: Fox News (HLL/CB) — read the source article.
