Microsoft Authenticator Deletes All Stored Passwords, Pushes Users Toward Passkeys

As announced, Microsoft today deletes all stored passwords from his authenticator app. Users have to secure their access data before they are lost permanently. Other functions of the app are preserved.

Users must secure passwords

For users of the Microsoft Authenticator, it is a critical deadline: As announced at the beginning of May, all stored passwords are irrevocably deleted from the app on August 1, 2025. If you do not ensure or transfer the data, you permanently lose access to the stored passwords.

The changeover takes place gradually and has been going on for months. Since June 2025, it has no longer been possible to save new passwords in the app or to import from external sources. This affects both manual entries and the synchronization with other services. In July 2025, the autofill function was then deactivated, so that the app no longer automatically entered login fields on websites or in apps.

Alternatives for affected users

Microsoft refers to the in -house web browser Edge for a smooth change. Via the Microsoft account, stored passwords can be taken over seamlessly in Edge and further used there. If users have already activated synchronization, no data should be lost. The transfer of passwords to other providers is also possible.

The exported data can then be imported into other password managers such as Bitwarden or KeePass. However, Microsoft warns that export from the authenticator must be completed on August 1, 2025. In addition to the passwords, payment information is also affected. They are also deleted from the app. However, these cannot be exported for security reasons. You have to secure users manually.

App remains for 2FA

However, the Microsoft Authenticator itself is not discontinued. Instead, the app of the app returns completely to its original security function: generating one-off codes for two-factor authentication (2FA). The app was originally introduced as a pure authentication app in 2016 and only later received password manager functions.

The current changes also do not affect the Passkeys. Users who have activated Passkeys for their Microsoft accounts must have the authenticator activated as a passkey provider. Deactivating the authenticator would also deactivate the Passkeys.

Strategic realignment on Passkeys

Loud Microsoft the setting of the password functions is part of a more comprehensive strategy. In this way, the group wants to switch completely to Passkeys in the long term. The modern authentication method makes classic passwords superfluous and is based on cryptographic key pairs.

Passkeys offer several registration methods: biometric data such as fingerprint or face recognition, pins that are only stored locally on the device, as well as authentication hardware such as FIDO2 keys. Sensitive data is not saved online, which significantly reduces the risk of data leaks or password theft. At the same time, use in everyday life is more comfortable.