Microsoft said on 21 November 2018 that it was opening password-free sign-in for Microsoft accounts and several online services, using Windows Hello, compatible security keys, or the Microsoft Authenticator app.
The move came as passwords continued to draw criticism for weak choices and repeated breaches. The source pointed to common examples such as “1234” to show why the old login model was losing credibility.
Windows Hello, a Windows 10 feature, relies on biometrics to confirm identity before access is granted. That can mean a fingerprint scan or facial recognition, with the Trusted Platform Module holding the private key and requiring biometric verification.
Microsoft also backed hardware security keys built on the FIDO2 standard. These USB or NFC devices keep credentials in a secure enclave and can be unlocked with a PIN or biometrics before sign-in is allowed.
The passwordless option was designed to work when users signed in through Microsoft Edge. Microsoft said the rollout would apply to devices running the latest Windows Update, version 1809, also known as the October Update.
Services included in the rollout were Outlook.com, Office 365, Skype, Cortana, OneDrive, Microsoft Edge, Microsoft Store, Bing and MSN.com. Microsoft said the change would be most useful for people already using Windows Hello-enabled PCs, although that group was still not the majority.
The article framed the update as part of a broader shift toward biometrics and hardware-based authentication across Microsoft’s ecosystem.
Why the change mattered ¶
The report tied the announcement to a wider industry push away from passwords. It said the future of authentication was increasingly being built around devices and biometric checks rather than memorized credentials.
For Microsoft users, the practical effect was simple: access to key services without typing a password, provided they had the right hardware or app support in place.
The source also linked to a 2017 article on common passwords and a 2016 list of the most common passwords of 2016, underscoring the long-running concern about weak login habits.
Nyakundi Report has preserved the source’s factual record and publication date while rewriting the article in fresh form.
