Is Microsoft literally trying to force us to another operating system?

David Sarti 0 Reputation points
2026-06-03T21:16:45.8+00:00

You have literally improved Microsoft Windows to the point it's becoming unusable. At this point you're leaving me no choice at all to switch to something like Linux . I used to be able to use a hardware key like Yubikey but now account sign in options no longer allows for multiple hardware keys because I left one in my home machine and carried a second one around my neck and a third in a fire safe, now you only support one and sometimes it doesn't work. I try using the Authenticator app and 90% of the time it doesn't work. And the password just isn't ever good enough It never even gets to the point to send me email confirmation. And if my hardware keys don't work on my home machine and I lose access to my Microsoft account Every bit of my data is poof up in smoke! I am currently in the process of wasting more money to buy a local network attached storage device and switching to Linux after all these years with Microsoft you're improving yourself right out of business!

#windows #microsoft #Signin

Microsoft Security | Microsoft Authenticator
0 comments

1 answer

Sort by: Newest
Most helpful Newest Oldest

  1. AI answer

    2026-06-03T21:17:02.6+00:00

    Windows and Microsoft accounts now emphasize passwordless and multi-factor security, which can feel restrictive but is designed to reduce account-takeover risk. There are supported ways to make this more reliable and less “all-or-nothing” so that a single failure (like one key or one phone) does not lock out access.

    Key points based on current behavior:

    1. Passwordless is optional and reversible for Microsoft accounts
    • A Microsoft account can still use a password instead of being fully passwordless.
    • If passwordless is currently enabled and causing friction, it can be turned off and a password added back:
      • Sign in to Microsoft account Additional security options.
      • Under Passwordless account, select Turn off and follow the prompts to add a password back to the account.
    • This restores the ability to sign in with a password plus whatever second factor is configured.
    1. Multiple sign-in methods should be configured to avoid lockout
    • Microsoft explicitly recommends having multiple security methods so that losing one factor does not mean losing the account.
    • Supported passwordless or MFA methods include:
      • Microsoft Authenticator app
      • Outlook for Android sign-in approvals
      • Windows Hello (face, fingerprint, PIN)
      • Physical security keys (FIDO2)
      • SMS or email codes
    • These can be managed under Security → Advanced security options for the Microsoft account.
    1. If the Authenticator app or a device is lost or replaced
    • If the phone with Microsoft Authenticator is lost or replaced, the old app/device should be removed from the account:
      • Sign in to the Microsoft account dashboard → Security → Advanced security options.
      • Under Ways to prove who you are, find the entry for Send sign-in notification associated with the old device and select Remove.
    • Other configured methods (SMS, email, security key, Windows Hello) can still be used to sign in while the app is unavailable.
    1. Two-step verification and recovery expectations
    • When two-step verification is enabled, Microsoft requires two forms of identification for recovery.
    • If two-step verification is on and only one method (for example, a single hardware key or a single phone) is available, recovery can be difficult or impossible if that method fails.
    • Microsoft recommends having at least three pieces of security info associated with the account (for example: Authenticator, SMS, email, and/or a security key) so that a single failure does not cause permanent lockout.
    1. Security keys and Windows sign-in
    • Windows 10/11 and Microsoft accounts support FIDO2 security keys as a passwordless sign-in method.
    • Security keys can be used at the Windows lock screen or in Microsoft Edge once registered.
    • If a primary method fails, the sign-in flow should offer Sign in another way to use a different registered method; if that link does not appear, it usually means no other methods are configured.
    1. Local data vs. cloud data
    • Even when using a Microsoft account, local data can be protected by Windows Hello (face, fingerprint, PIN) instead of only cloud-based factors.
    • For critical files, keeping independent backups (such as NAS, external drives, or other storage) is a valid strategy so that access to the Microsoft account is not the single point of failure.

    In practice, the most resilient setup is:

    • Keep passwordless optional: enable it only if it improves the experience, and disable it if it causes sign-in failures.
    • Maintain multiple independent sign-in methods: at least one app-based method (Authenticator or Outlook for Android), one hardware method (security key), and one out-of-band method (SMS or email).
    • Regularly review Advanced security options to remove old devices and ensure backup methods are current.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.