Microsoft Confirms Password Deletion for 1B Users

Re:Microsoft Confirms Password Deletion for 1B Users by ndriscoll on Tuesday December 17, 2024 @04:01PM (#42445279)

Ironically, just about the only sites where it makes sense to do this as a user are... those from the financial industry, who in their infinite wisdom frequently decide to prevent autofill. There's otherwise basically no reason to ever open the password manager or to know any of your passwords.

In any case, if you have a KBA recovery mechanism, then anyone who would go dig through their saved passwords to put into a phishing site will also just enter the recovery info into a phishing site and enroll an attacker's passkey.

[ Parent | on HN ]

Re:Microsoft Confirms Password Deletion for 1B Users by sandos on Wednesday December 18, 2024 @04:59AM (#42449290)

Finance sites using passwords feels... so off. I do use Kraken somewhat, and they have a passwors still, but also use an authentication app.

In Sweden no bank has used passwords online.. ever I think? It has always been 2-factor of some kind.

[ Parent | on HN ]

Re:Microsoft Confirms Password Deletion for 1B Users by portaouflop on Friday December 20, 2024 @09:26AM (#42471308)

What was the first factor ?

For me it was always some kind of PIN - and then they built their own proprietary second factors which is also a bit insane imo

[ Parent | on HN ]