Changes to Microsoft Authenticator autofill

So they’re removing the ability to use password autofill for browsers other than Edge. How nice of them.

Does anyone use Google Authenticator?
Does it do password autofill? I’ll switch if it does.
It’s a shame because I really love MS Authenticator for my Microsoft logins but I’m not about to use two different apps.

antspants said:

So they’re removing the ability to use password autofill for browsers other than Edge. How nice of them.

Click to expand...

I wonder why!

antspants said:

Does anyone use Google Authenticator?
Does it do password autofill? I’ll switch if it does.
It’s a shame because I really love MS Authenticator for my Microsoft logins but I’m not about to use two different apps.

Click to expand...

I installed the MS Authenticator on my phone earlier today in case I do have to use it. I'm hoping that I can use Dashlane and don't have to use it. I'm still finding these passkeys confusing.

Winuser said:

I installed the MS Authenticator on my phone earlier today in case I do have to use it. I'm hoping that I can use Dashlane and don't have to use it. I'm still finding these passkeys confusing.

Click to expand...

Re Dashlane on an Android phone. I have it working correctly using Edge with autofill for passwords. With Chrome, autofill needs to be enabled in Settings and the Google Password Manager disabled.

Winuser said:

I'm still finding these passkeys confusing.

Click to expand...

Best thing is to probably hit the tutorials and read the pre words on them? I don’y know mate. I am yet to look. I have too many other things cooking:

• Create and Save Passkey for Website in Windows 11
• Sign in to Website with Passkey in Windows 11
• View Passkeys for Apps and Websites in Windows 11

For those who use Autofill, why not try out the Bitwarden app? It also has extensions, one of which I am currently using in my Firefox.

HuntyFtw said:

For those who use Autofill, why not try out the Bitwarden app? It also has extensions, one of which I am currently using in my Firefox.

Click to expand...

Because to my knowledge, it forces you to store your passwords and information online, would be why I don’t use it. Also to my knowledge, it doesn’t have WiFi sync across devices.

Winuser said:

I'm still finding these passkeys confusing.

Click to expand...

Passkey is like a fake 2FA, it is basically a password on an already verified device.
It can be easily abused (hijacked session), it is less secure, but more convenient.

I asked ChatGPT to check your statement

"The statement you provided is mostly false or misleading, although it contains a grain of truth regarding convenience. Here's a breakdown:

Claim 1: "Passkey is like a fake 2FA" — False
Passkeys replace passwords entirely and use public key cryptography. They're not 2FA and not pretending to be. A passkey is:

A private key stored on your device (like a phone or computer),

Matched with a public key held by the website or service.

Authentication happens by cryptographic challenge-response, not by entering a password.

Claim 2: "It is basically a password on an already verified device" — False
No, a passkey is not a password. It's much more secure:

The private key never leaves the device.

Even if a site is hacked, the attacker only gets the public key, which is useless without the private key.

The "verified device" bit refers to the fact that the device is authenticated with biometrics (e.g. fingerprint, face ID) or PIN.

Claim 3: "It can be easily abused (hijacked session)" — Misleading
Hijacking a session can happen with any authentication method, but it’s unrelated to how secure passkeys are at login:

If malware is running on the device, any session could be hijacked.

But that applies to passwords, 2FA, and passkeys equally.

In fact, passkeys reduce phishing and credential reuse attacks, which are much more common.

Claim 4: "It is less secure, but more convenient" — False
It is more secure and more convenient:

More secure: No shared secrets, not phishable, can't be reused.

More convenient: No need to remember passwords or type 6-digit codes."

Great post @kelper you beat me to it debunking those false claims.

Plenty of information about passkeys here.

Marcus Vinicus said:

Re Dashlane on an Android phone. I have it working correctly using Edge with autofill for passwords.

Click to expand...

On my phone the only site that needs a password is the Windows 11 forums.

antspants said:

Best thing is to probably hit the tutorials and read the pre words on them? I don’y know mate. I am yet to look. I have too many other things cooking:

• Create and Save Passkey for Website in Windows 11
• Sign in to Website with Passkey in Windows 11
• View Passkeys for Apps and Websites in Windows 11

Click to expand...

I did read all of the tutorials but I'm still finding it a little confusing. I going to be needing access to these sites from all of my computers and not just the one. Because Windows saves the passkey on let's call it computer #1, that doesn't help me when I go to access a site with computer #2. Using an app on my cell phone is doable but it's something I prefer not to do. If I can get all the passkeys saved to my Dashlane account I'll feel much better because I think that Dashlane will automatically enter the passkeys from any of my computers, even a new one. I did find out yesterday that I need to make sure that I'm logged into Dashlane first. I came close to needing to wait 48 hours to have my Google password reset. Luckily I was able to cancel it. Because it's all new to me I'm probably over thinking it and worrying about something I don't need to worry about.

TairikuOkami said:

Passkey is like a fake 2FA, it is basically a password on an already verified device.
It can be easily abused (hijacked session), it is less secure, but more convenient.

Click to expand...

They say it's more secure than a password but I don't see how. I guess it is more secure than the ol' 1234 password.