You Can Now Log Into Microsoft Accounts Without a Password

To paraphrase Winston Churchill, passwords are the worst form of online security, except for all the others. Still, companies do their darnedest to replace passwords with something less likely to be exposed in a data breach. Microsoft is the latest to try something new. As of yesterday (Nov. 20), anyone with a FIDO2 physical security key and the latest version of Windows 10 can sign into their Microsoft online accounts using only a fingerprint or a PIN. Alex Simons, corporate vice president of program management for the Microsoft Identity Division, wrote about the new development on the Microsoft Office blog. The process sounds remarkably simple, provided you have the right tools. All you need is a Windows 10 computer running Build 1809 (the October 2018 Update) , a Microsoft account, the Microsoft Edge web browser and a physical FIDO2 USB security key. Compatible keys include the Feitan BioPass FIDO2 and the YubiKey 5 ...