Microsoft wants users to abandon passwords on PCs running Windows 10. Previously, the company the requirement for mandatory password changes for corporate PCs, and now they have released a test build of 'ten', in which users can log in without a password for Microsoft accounts.
As a substitute, Windows Hello offers facial recognition technology, fingerprint scanning, or a PIN code. Naturally, in all cases except the last, additional hardware devices like a camera or fingerprint scanner are required.
The rationale behind this approach is quite logical. Users tend to forget various passwords, resulting in them using the same password across different services, PCs, and so on. However, this significantly impacts system security. Even two-factor authentication methods do not always help.
Microsoft claims that the PIN code of Windows Hello is much safer than a password, even if it may not seem so. The core idea is that the code is stored on the device rather than being transmitted online, which greatly reduces the chances of data interception.
Among other methods, the company offers two-factor authentication systems like SMS, Microsoft Authenticator apps, Windows Hello, or even physical security keys that meet the FIDO2 standard. This means that in the future, passwords could indeed disappear as a class of phenomena.
Currently, Microsoft plans to allow users to completely remove the password option from the login screen in Windows 10. This also applies to business users via Azure Active Directory, allowing companies to operate without a password, using only security keys, authentication apps, or Windows Hello. This capability is expected to be available in the spring of next year when the release version becomes available.
Source: 3dnews.ru
