𝐌𝐢𝐜𝐫𝐨𝐬𝐨𝐟𝐭 𝐄𝐧𝐭𝐫𝐚 𝐰𝐢𝐥𝐥 𝐬𝐨𝐨𝐧 𝐥𝐞𝐭 𝐞𝐥𝐢𝐠𝐢𝐛𝐥𝐞 𝐮𝐬𝐞𝐫𝐬 𝐜𝐡𝐚𝐧𝐠𝐞 𝐭𝐡𝐞𝐢𝐫 𝐩𝐚𝐬𝐬𝐰𝐨𝐫𝐝 𝐰𝐢𝐭𝐡𝐨𝐮𝐭 𝐤𝐧𝐨𝐰𝐢𝐧𝐠 𝐭𝐡𝐞𝐢𝐫 𝐜𝐮𝐫𝐫𝐞𝐧𝐭 𝐩𝐚𝐬𝐬𝐰𝐨𝐫𝐝.
Instead, users can authenticate with a passkey, Windows Hello for Business, or FIDO2 security key and set a new password directly from 𝐌𝐲 𝐒𝐢𝐠𝐧-𝐈𝐧𝐬 (without using Self-Service Password Reset (SSPR) or contacting the helpdesk).
If you’ve deployed passwordless authentication, you’ve probably run into this scenario.
Users rarely use their password anymore, but many organizations still keep one for legacy applications and services. When that password is forgotten, it often turns into an SSPR flow or a helpdesk ticket.
Microsoft is now removing that friction.
Once this feature is enabled, eligible users can securely authenticate with an existing passwordless credential and create a new password themselves.
The feature will be:
– Disabled by default.
– Configured at the tenant level.
– Available globally starting in late October 2026.
Message ID: MC1437671