Microsoft to stop sending SMS codes for personal accounts | Hacker News Reader

Microsoft to stop sending SMS codes for personal accounts

support.microsoft.com

9 pointsCharlesW6 comments

This is so annoying. I tried to see what passkey is, and tried to sign in, and MSFT always tried to ask me to use authenticator, and when I clicked other ways to sign in, somehow it went to "Reset password", and I clicked cancel, and now I can't sign in any more.

The whole fucking security thing has nothing fucking to do with my security, but with their apps and control. I had enough with this. gonna delete everything MSFT from my world. Fuck them.

Passkey is not unique to Microsoft, Apple supports it with their Password manager built-in to iOS and macOS, I can authenticate with my passkey on my Macs and on my iPhone with ease. BitWarden supports it as well, but I rather not use BitWarden if I can just use my phone or laptop.

Google, Microsoft, Apple etc everyone supports Passkey its a known spec that was drafted and implemented a while ago. Point being you don't need any special Microsoft to use Passkey, I would be shocked if Android doesn't have it baked in.

Just in case you/others reading this didn't know, yoh don't have to use Microsoft Authenticator. They hide the option away, but there is a button to click to use your own authenticator app and it gives you the QC code/numbers to input into Bitwarden/KeePass/etc.

The FAQs on the page says there are "secure and reliable recovery options" when the device with the passkey is lost. I wish there was more explanation for that because trying to help people recover Microsoft accounts when they don't have the password is mostly when I have used the SMS codes.

Recent updates to Microsoft account sign-in now support passkeys with device biometric authentication, making phishing virtually impossible.

So according to Microsoft biometric authentication will make people immune to being tricked. Pretty ironic stance.

> Microsoft believes that the future of authentication is passwordless, secure, and user-friendly.

...but passkeys are not user-friendly, unless you are a user who is happy to do whatever the bigco tells you to do, and you never stray from the happy path.

Reply on news.ycombinator.com