Microsoft accounts can go passwordless, making “password123” a thing of the past

The password is "outsourced" to the phone : pin or fingerprint to unlock the phone and the Authenticator app