I am unable to remove my password as log in option, while having other security options

Question

I am unable to remove my password as log in option, while having other security options

DS 5

Hey everyone,

Due to my hotmail being old I often can't sign in using my password, as 'you have tried too many wrong passwords'. Which for the record isn't me, it's the result of having an old account that I used for all the websites that have been hacked over the years. Interestingly, they are apparently unable to figure out my pw.

Anyhow, that is why I wanted to remove sign in with password.

In order to do that you need multiple sign in options, which I have (two send a code to this e-mail adress, and one authenticator app). BUT, when I want to remove the password option it keeps prompting me to add an authenticator instead. So I click that option, add my DUO mobile authenticator (AGAIN) and then am sent back to the sign in options screen. Every time. The password option is not removed.

DS 5 Reputation points

2026-05-21T07:02:40.0366667+00:00

The AI assistant says that passwordless is ONLY with MS Authenticator. Why? I do not want the MS Authenticator, I want to use the DUO Mobile one. Why is this enforced?
Hornblower409 14,970 Reputation points

2026-05-22T11:42:09.64+00:00

@DS said

I do not want the MS Authenticator, I want to use the DUO Mobile one

Unless Microsoft has changed the rules, you are suppose to be able to use any app that supports Time-based One-Time Password (TOTP) protocol. And DUO does.
https://learn.microsoft.com/en-us/answers/questions/5250348/using-2fa-without-microsoft-authenticator-app

If you can't get it to work, come back and post the details of what you tried and where it went sideways.

I often can't sign in using my password ... they are apparently unable to figure out my pw

You could try a new Login Only Alias and disable sign-in on your old email alias.

See the Answer by "Hornblower409 on Feb 27, 2026" in
https://learn.microsoft.com/en-us/answers/questions/5789093/i-get-a-few-2fa-notifications-from-canada-daily-us
DS 5 Reputation points

2026-05-22T12:07:51.4666667+00:00

Thanks for replying @Hornblower409 ,

"If you can't get it to work": As mentioned in the post I have tried DUO Mobile many times and it does not work, the following happens:
Click Remove password
Pop-up: Add a different sign in option
Select authenticator from pop-up
New screen: Add Microsoft Authenticator, or select different authenticator
Select the different authenticator option
New screen: QR-code for adding the authenticator
Scan the QR-code with DUO Mobile
Confirm code in the new screen
DUO Mobile adds account
Microsoft prompts it has added a sign in option.
I am being reverted back to my sign in options, with the top one being the password, which was not removed.
Click Remove password
Pop-up: Add a different sign in option
etc. etc.
Hornblower409 14,970 Reputation points

2026-05-22T12:27:15.95+00:00

@DS said

Click Remove password ...

This is not my area (this is, after all, an Outlook forum) but do I understand? You can successfully add DUO as an authenticator? Not as part of Remove Password, but just as a new way to sign-in. If I ask Google AI Microsoft Account. Add DUO as an authenticator it give me what seems like a set of reasonable steps.

And once it's added as just another way to sign-in, then when you try Remove Password is when it balks unless you add Microsoft Authenticator first?

If so, can you verify that you can in fact use DUO to sign-in, add Microsoft Authenticator, remove your password, then remove Microsoft Authenticator? Obviously be sure you have at least two other ways to sign-in.
DS 5 Reputation points

2026-05-22T12:47:50.3066667+00:00

@Hornblower409 Ah, I was directed to this forum with regards to these questions, but I can post them elsewhere if need be. DOU was already one of my sign in options and yes it adds every time. I have a feeling that if I add MS Authenticator and will try to remove that (after removing password) I will end up in the same loop, while having to (temporarily) add an extra authenticator app.
Hornblower409 14,970 Reputation points

2026-05-22T18:13:29.47+00:00
@DS said

I was directed to this forum with regards to these questions, but I can post them elsewhere if need be

You are in the right place. That was just me kvetching about the lack of a Microsoft | Account | Security tag.

I have a feeling that if I add MS Authenticator

I am sorry. But I can't test and I can't find anything in the Microsoft docs or older forum post that talks about your situation.

All I can suggest is that you bring in Microsoft Support to see if they have any ideas.

Open a browser to https://support.microsoft.com/en-us/home/contact

Tell us your problem: "Cisco Duo app can not be used as an authentication method for passwordless"

[Get Help] {Scroll down to the bottom of the page} [Sign in to Contact Support]

Sign in with any Microsoft account

Products and services: "Other Products"

Category: "Manage Account Security"

[Confirm]

Choose a support option -> "Chat with a support agent in your web browser"
Hornblower409 14,970 Reputation points

2026-05-23T02:46:49.98+00:00

@DS said

I have a feeling that if I add MS Authenticator ...

I understand your reluctance to muck around with your primary email account.

If Microsoft Support doesn't have any answers, you might want to try creating a new, temporary account at https://signup.live.com and play around with that one using DUO as the authenticator app.

If you take this route, please report back on your findings - Is there a requirement that you must have Microsoft Authenticator (and no other authenticator app) to be able to do password less?
DS 5 Reputation points

2026-05-24T08:03:52.84+00:00

@Hornblower409 thanks. I'll send a message to MS Support as well. If I find a solution I'll post it here.

1 answer

Your answer

DS 5 Reputation points

2026-05-21T07:02:40.0366667+00:00

The AI assistant says that passwordless is ONLY with MS Authenticator. Why? I do not want the MS Authenticator, I want to use the DUO Mobile one. Why is this enforced?
Hornblower409 14,970 Reputation points

2026-05-22T11:42:09.64+00:00

@DS said

I do not want the MS Authenticator, I want to use the DUO Mobile one

Unless Microsoft has changed the rules, you are suppose to be able to use any app that supports Time-based One-Time Password (TOTP) protocol. And DUO does.
https://learn.microsoft.com/en-us/answers/questions/5250348/using-2fa-without-microsoft-authenticator-app

If you can't get it to work, come back and post the details of what you tried and where it went sideways.

I often can't sign in using my password ... they are apparently unable to figure out my pw

You could try a new Login Only Alias and disable sign-in on your old email alias.

See the Answer by "Hornblower409 on Feb 27, 2026" in
https://learn.microsoft.com/en-us/answers/questions/5789093/i-get-a-few-2fa-notifications-from-canada-daily-us
DS 5 Reputation points

2026-05-22T12:07:51.4666667+00:00

Thanks for replying @Hornblower409 ,

"If you can't get it to work": As mentioned in the post I have tried DUO Mobile many times and it does not work, the following happens:
Click Remove password
Pop-up: Add a different sign in option
Select authenticator from pop-up
New screen: Add Microsoft Authenticator, or select different authenticator
Select the different authenticator option
New screen: QR-code for adding the authenticator
Scan the QR-code with DUO Mobile
Confirm code in the new screen
DUO Mobile adds account
Microsoft prompts it has added a sign in option.
I am being reverted back to my sign in options, with the top one being the password, which was not removed.
Click Remove password
Pop-up: Add a different sign in option
etc. etc.
Hornblower409 14,970 Reputation points

2026-05-22T12:27:15.95+00:00

@DS said

Click Remove password ...

This is not my area (this is, after all, an Outlook forum) but do I understand? You can successfully add DUO as an authenticator? Not as part of Remove Password, but just as a new way to sign-in. If I ask Google AI Microsoft Account. Add DUO as an authenticator it give me what seems like a set of reasonable steps.

And once it's added as just another way to sign-in, then when you try Remove Password is when it balks unless you add Microsoft Authenticator first?

If so, can you verify that you can in fact use DUO to sign-in, add Microsoft Authenticator, remove your password, then remove Microsoft Authenticator? Obviously be sure you have at least two other ways to sign-in.
DS 5 Reputation points

2026-05-22T12:47:50.3066667+00:00

@Hornblower409 Ah, I was directed to this forum with regards to these questions, but I can post them elsewhere if need be. DOU was already one of my sign in options and yes it adds every time. I have a feeling that if I add MS Authenticator and will try to remove that (after removing password) I will end up in the same loop, while having to (temporarily) add an extra authenticator app.
Hornblower409 14,970 Reputation points

2026-05-22T18:13:29.47+00:00

@DS said

I was directed to this forum with regards to these questions, but I can post them elsewhere if need be

You are in the right place. That was just me kvetching about the lack of a Microsoft | Account | Security tag.

I have a feeling that if I add MS Authenticator

I am sorry. But I can't test and I can't find anything in the Microsoft docs or older forum post that talks about your situation.

All I can suggest is that you bring in Microsoft Support to see if they have any ideas.

Open a browser to https://support.microsoft.com/en-us/home/contact

Tell us your problem: "Cisco Duo app can not be used as an authentication method for passwordless"

[Get Help] {Scroll down to the bottom of the page} [Sign in to Contact Support]

Sign in with any Microsoft account

Products and services: "Other Products"

Category: "Manage Account Security"

[Confirm]

Choose a support option -> "Chat with a support agent in your web browser"
Hornblower409 14,970 Reputation points

2026-05-23T02:46:49.98+00:00

@DS said

I have a feeling that if I add MS Authenticator ...

I understand your reluctance to muck around with your primary email account.

If Microsoft Support doesn't have any answers, you might want to try creating a new, temporary account at https://signup.live.com and play around with that one using DUO as the authenticator app.

If you take this route, please report back on your findings - Is there a requirement that you must have Microsoft Authenticator (and no other authenticator app) to be able to do password less?
DS 5 Reputation points

2026-05-24T08:03:52.84+00:00

@Hornblower409 thanks. I'll send a message to MS Support as well. If I find a solution I'll post it here.

Answer 1

Removing the password sign-in option on a Microsoft account requires using a supported passwordless method from Microsoft, not a third‑party authenticator like Duo.

Key points based on the described behavior:

Passwordless requires Microsoft-supported methods
- To go passwordless, the account must be set up with one of these methods:
  - Microsoft Authenticator app
  - Outlook for Android sign-in approvals
  - Windows Hello
  - Physical security keys
  - SMS or email codes
- Any authentication app can be used for two-step verification, but the passwordless account feature specifically expects Microsoft’s own supported methods (for example, Microsoft Authenticator or Outlook for Android), not Duo.
Why the password option is not removed
- The flow described (being prompted to add an authenticator, adding Duo, and being returned to the same screen with the password still present) matches the requirement that the system is looking for a Microsoft Authenticator/Outlook-based passwordless method.
- Because Duo is not recognized as the passwordless method for Microsoft accounts, the “Passwordless account” toggle cannot complete, so the password sign-in option remains.
How to successfully remove the password
- Install and configure a supported passwordless method:
  1. Download and install the Microsoft Authenticator app or Outlook for Android.
  2. Open the app and add the Microsoft account following the prompts.
  3. Sign in to the Additional security options page for the Microsoft account.
  4. Under Passwordless account, select Turn on.
  5. Follow the prompts and approve the request in Microsoft Authenticator (or Outlook for Android).
- After this is completed, the account becomes passwordless and the password sign-in option is removed.
If passwordless is already on but issues persist
- If passwordless was turned on and needs to be reverted, it can be turned off from the same Additional security options page by selecting Turn off under Passwordless account, then following the prompts to add a password back.
Mitigating repeated “too many wrong passwords” lockouts
- Once passwordless is enabled with Microsoft Authenticator/Outlook, sign-in can be done via app approvals, Windows Hello, security keys, or SMS/email codes, reducing reliance on the password and mitigating the impact of repeated password-guess attempts.

References: