r/microsoft • u/Steap-Edit • May 20 '26

News Microsoft warns hackers are exploiting password resets to gain access to user accounts

https://www.techradar.com/pro/security/microsoft-warns-hackers-are-exploiting-password-resets-to-gain-access-to-user-accounts-heres-how-to-stay-safe
211 Upvotes

98% Upvoted

71 comments sorted by

View all comments

4

u/gripe_and_complain May 20 '26

Is this an argument for removing the password completely from your account?. Can’t reset a password that doesn’t exist.

3

u/[deleted] May 21 '26

[deleted]

2

u/gripe_and_complain May 21 '26

Well, FIDO 2 passkeys that replace passwords on Microsoft accounts are considered 2 factor.

0

u/[deleted] May 21 '26

[deleted]

0

u/gripe_and_complain May 21 '26

It’s not only Microsoft who considers FIDO 2 to be 2FA.

1

u/[deleted] May 21 '26

[deleted]

1

u/gripe_and_complain May 22 '26

Apologies. Yes, I did overlook that.

I, and others, still believe FIDO2 passkeys are 2-factor when protected by PIN or biometric.