Microsoft is discontinuing the password storage and autofill feature in its Authenticator app by August 2025, urging users to transition to Microsoft Edge for password management. Users must export their data before the deadlines to avoid losing access, while Passkey support will remain in the Authenticator app.

Microsoft has confirmed that its Remote Desktop Protocol (RDP) allows users to log in with revoked passwords, a design choice intended to prevent user lockouts. This controversial decision means that even after changing a password, access can still be granted, leaving millions of users vulnerable without clear guidance or detection methods from Microsoft.