Blog Post
New user experience for consumer authentication
shommes Thanks for reading our update. We care deeply about customer experience and will continue to invest with user feedback and data as a guide. The user research referenced in the post is based on observing users who must use passwords v users who decide to use passkeys instead. Device pins and faceID's do not sync to the cloud. Customers who have passwords on their accounts are welcome to keep using them, we are not deleting passwords or data as a part of these changes. Thanks!
"Device pins and faceID's do not sync to the cloud."
That's not the point. The point is that requiring me to store biometric data on my device means it can be stolen (and become the victim of identity theft) when I shouldn't have to use it to begin with.
- The login experience is optimized for people who log in without passwords instead of being optimized for the method someone actually uses. That is hostile design. I shouldn't have to click through all the passkey nonsense because you can't be bothered to optimize for passwords. You are designing the login experience to be hostile to password users on purpose hoping to convince people to switch to another method when you should be designing with the user's preference at the core.
- We now also have reports that new accounts will no longer support passwords starting in June 2025. Again, hostile design. We should be able to log in normally.
- The reliance on passwordless has accessibility issues for people who can't use faceID or fingerprints.
It is clear to me that Microsoft only cares about people who agree with their current approach to "security". Unless something changes drastically, I will switch to Linux when Windows 10 is unceremoniously slaughtered in October. At that point there is nothing left to stick around for: just an inferior OS stuffed with AI spyware and an inferior login method that isn't securing any account data and actively tries to lock out the user who should have access.