Why Microsoft Authenticator ditched multiple-choice logins
AI-summarised brief · reviewed before publication
Microsoft is rolling out a change to its Authenticator app, requiring users to manually enter a two-digit number for login verification instead of tapping one of three options. This update aims to improve security by reducing the risk of accidental approvals and spam attacks. The change first appeared for enterprise and education users, but has since started rolling out to personal Microsoft accounts. The update is part of Microsoft's efforts to phase out insecure SMS codes as an authentication option.
💡 Why It Matters
- · The manual number entry requirement adds a crucial layer of security, making it significantly harder for malicious actors to exploit multi-factor authentication vulnerabilities.
- · By reducing the risk of accidental approvals, Microsoft is taking a targeted approach to mitigate a common attack vector, ultimately strengthening user protection.