Microsoft announced that passkeys are becoming the new standard for signing in to its services. The move continues the industry shift toward phishing-resistant authentication that can reduce reliance on passwords and one-time codes.
The change matters for both consumer and enterprise security because identity remains one of the most common entry points for attacks. As AI increases the scale and polish of phishing campaigns, stronger default authentication is becoming more urgent.