‘Increasingly Urgent’—Microsoft Issues Password And 2FA Warning

Microsoft warned that passwords and older 2FA methods still leave accounts exposed to phishing and takeover.

The company urged users and organizations to move to passkeys and other phishing-resistant sign-in options.

Microsoft said fallback methods like SMS codes and recovery paths can still be compromised, even when 2FA is enabled.

The guidance comes as AI-powered phishing makes credential theft easier and more convincing.