Technologies

You Have Less Than 3 Weeks Left Before Microsoft Deletes Your Passwords. Do This Now

If you rely on the Authenticator app to manage your passwords, check out these alternatives before Aug. 1.

The future of Microsoft will see us say goodbye to an all-too-familiar thing of the past — passwords.

After August, Microsoft Authenticator will no longer support passwords at all. If you’re still using the Authenticator app to manage logins, big changes are coming fast. This shift is already in motion: New password creation was disabled in June, and autofill support was cut off in July.

For years, Microsoft Authenticator has been a go-to for managing both multifactor authentication and saved passwords. However, starting next month, it will move to passkeys instead. That means your logins will soon rely more on things like PINs, fingerprint scans or facial recognition: They’re all more secure, faster and harder to steal than a standard password.

Passkeys get rid of the risky password habits practiced by 49% of US adults, like using the same password for multiple accounts or using personal hints, according to a CNET survey. However, those convenient hints can pose a bigger risk to scammers, identity theft and fraud.

If you’re a fan of Authenticator and not sure where to start before the switch, here are other password managers CNET recommends and steps you should take before August.

When will Microsoft Authenticator stop supporting passwords?

Microsoft Authenticator houses your passwords and lets you sign into all your Microsoft accounts using a PIN, facial recognition like Windows Hello, or other biometric data like a fingerprint. Authenticator can be used in other ways, such as verifying you’re logging in if you forgot your password, or using two-factor authentication as an extra layer of security for your accounts. In June, the company stopped letting users add passwords to Authenticator.

Starting this month, you won’t be able to use the autofill password function. And next month, you’ll no longer be able to use saved passwords.

If you still want to use passwords instead of passkeys, you can store them in Microsoft Edge. However, CNET experts recommend adopting passkeys during this transition. «Passkeys use public key cryptography to authenticate users, rather than relying on users themselves creating their own (often weak or reused) passwords to access their online accounts,» Tomaschek said.

Why are passkeys a better alternative to passwords?

So what exactly is a passkey? It’s a credential created by the Fast Identity Online Alliance that uses biometric data or a PIN to verify your identity and access your account. Think about using your fingerprint or Face ID to log into your account. That’s generally safer than using a password that is easy to guess or susceptible to a phishing attack.

«Passwords can be cracked, whereas passkeys need both the public and the locally stored private key to authenticate users, which can help mitigate risks like falling victim to phishing and brute-force or credential-stuffing attacks,» said Attila Tomaschek, CNET’s software senior writer and digital security expert.

Passkeys aren’t stored on servers like passwords. Instead, they’re stored only on your personal device. More conveniently, this takes the guesswork out of remembering your passwords and the need for a password manager.

How to set up a passkey in Microsoft Authenticator

Microsoft said in a May 1 blog post that it will automatically detect the best passkey to set up and make that your default sign-in option. «If you have a password and ‘one-time code’ set up on your account, we’ll prompt you to sign in with your one-time code instead of your password. After you’re signed in, you’ll be prompted to enroll a passkey. Then the next time you sign in, you’ll be prompted to sign in with your passkey,» according to the blog post.

To set up a new passkey, open your Authenticator app on your phone. Tap on your account and select «Set up a passkey.» You’ll be prompted to log in with your existing credentials. After you’re logged in, you can set up the passkey.

Other password manager alternatives

Since Microsoft will get rid of all of your passwords in a few short weeks, you’ll need a new place to store your passwords safely. Tomaschek has a few of the best password manager recommendations after testing and reviewing several.

The top recommendation is Bitwarden for its transparency. It’s open-source and audited annually. From a price perspective, the free plan lets you store infinite passwords across unlimited devices. The free plan also includes features most password managers would charge for, including password sharing and a username and password generator.

Bitwarden’s upgraded plans have other upgraded features that could be worth the cost, too.

Personally, Tomaschek has been using 1Password for a while, and he likes the interface and family plan. Even though it’s second on the list, Tomaschek says it’s just as good as Bitwarden.

Technologies

Today’s NYT Mini Crossword Answers for Thursday, July 17

Here are the answers for The New York Times Mini Crossword for July 17.

Looking for the most recent Mini Crossword answer? Click here for today’s Mini Crossword hints, as well as our daily answers and hints for The New York Times Wordle, Strands, Connections and Connections: Sports Edition puzzles.

I breezed through today’s Mini Crossword. There’s a little something for everyone. Birders will appreciate 3-Down while musicians will immediately know the answer to 6-Down. Read on for an assist with today’s Mini Crossword. And if you could use some hints and guidance for daily solving, check out our Mini Crossword tips.

The Mini Crossword is just one of many games in the Times’ games collection. If you’re looking for today’s Wordle, Connections, Connections: Sports Edition and Strands answers, you can visit CNET’s NYT puzzle hints page.

Read more: Tips and Tricks for Solving The New York Times Mini Crossword

Let’s get to those Mini Crossword clues and answers.

Mini across clues and answers

1A clue: Workout facilities
Answer: GYMS

5A clue: Pipe dream? Just the opposite!
Answer: LEAK

6A clue: In good spirits
Answer: JOLLY

7A clue: Up to the task
Answer: ABLE

8A clue: Headache-inducing situation
Answer: MESS

Mini down clues and answers

1D clue: Boston newspaper
Answer: GLOBE

2D clue: TALKS LIKE THIS
Answer: YELLS

3D clue: Mallard ducks with green heads, e.g.
Answer: MALES

4D clue: Drone’s zone
Answer: SKY

6D clue: Rock out
Answer: JAM

Technologies

WeTransfer Backtracks on AI File Training After Backlash: What You Need to Know

The company has updated the changes to its policies after some users objected to new terms.

WeTransfer, the service that allows users to send large files to others, is explaining itself to clients and updating its terms of service after a backlash related to training AI models.

The company published a blog post, «WeTransfer Terms of Service — What’s Really Changing,» that details more updates the company made to its policies, after users noticed that recent changes seemed to suggest WeTransfer was training AI models on the files users are transferring.

In the blog post, the company says: «First things first. Your content is always your content.»

The post goes on to say, «We don’t use machine learning or any form of AI to process content shared via WeTransfer.» WeTransfer explains that its use of AI would be to improve content moderation and enhance its ability to prevent the distribution of harmful content across its platform.

The company adds that those AI tools aren’t being used and haven’t been built yet. «To avoid confusion,» it says, «we’ve removed this reference.»

A representative for WeTransfer did not immediately return an email seeking further comment.

The backlash over the terms prompted users such as political correspondent Ava Santina to write on X, «Time to stop using WeTransfer who from 8th August have decided they’ll own anything you transfer to power AI.»

What this means for users

Anxieties are high about what information users share or store in services such as social media accounts is accessed by companies to train AI models. WeTransfer may be used for highly sensitive file transfers, raising fears that private information might be accessed by AI. According to the company, this isn’t the case.

To further explain, the company said in its post:

«YES — Your content is always your content. In fact, section 6.2 of our Terms of Service clearly states that you ‘own and retain all right, title, and interest, including all intellectual property rights, in and to the Content’.»
«YES — You’re granting us permission to ensure we can run and improve the WeTransfer service properly.»
«YES — Our terms are compliant with applicable privacy laws, including the GDPR.»
«NO — We are not using your content to train AI models.»
«NO — We do not sell your content to third parties.»

When the Terms of Service change

While eagle-eyed experts understood the potential implications of what WeTransfer’s new terms could mean for people using the service, it’s unlikely that most people would be able to spot such changes.

«Expecting users to fully understand Terms of Service is unrealistic. These documents are often too complex to navigate,» says Haibing Lu, associate professor at the Leavey School of Business at Santa Clara University.

Lu told CNET that companies would do well to clearly highlight any changes they make to AI-related terms and explain them clearly to give people a real choice. «That’s what true transparency looks like,» Lu says. «Companies are increasingly risking backlash when they update Terms of Service to include AI, especially when users’ data is involved.»

Companies including Adobe, Slack and Zoom have had similar issues with terms changes related to AI, but it’s not just AI that’s the problem, Lu says — rather, it’s the lack of transparent communication.

In the case of WeTransfer, Lu says the company’s response, including revising the terms and blogging about them, «was a smart move and helped rebuild trust. It showed they were listening and willing to act fast.»

WeTransfer could include more understandable language in its terms, or communicate the changes better or sooner, Lu says, adding: «Transparency shouldn’t start after a backlash.»