A Microsoft account without a password

Your personal Microsoft account (for Outlook.com, Xbox, OneDrive or Windows) can go without a password. You then sign in with the Microsoft Authenticator app, Windows Hello, a passkey or a code by email or text. Without a password, there's nothing to steal.

Prepare

  1. Install Microsoft Authenticator on your phone and add your personal Microsoft account.
  2. Or set up a passkey with Windows Hello, your phone or a security key.

Remove your password

  1. Go to account.microsoft.com and sign in.
  2. Choose Security > Advanced security options (or Manage how I sign in).
  3. Turn on Passwordless account.
  4. Approve the notification in the Authenticator app.
Advanced security options of a Microsoft account
Turning on a passwordless account
Approving in Microsoft Authenticator
The password has been removed

What to watch out for

And at work?

For work accounts, your admin turns on passwordless sign-in. Read passwordless sign-in in Microsoft 365. Microsoft now makes new personal accounts passwordless by default and encourages passkeys. Also see what is MFA?

Read also

Enable passwordless sign-in in Microsoft 365 in 3 steps
What is Multi-Factor Authentication (MFA)?
Create a free Microsoft account or Outlook.com address

Nederlandstalige versie: Je persoonlijke Microsoft-account gebruiken zonder wachtwoord

share on LinkedIn ☕ buy me a coffee

More in English

▸Check where and when your Microsoft account was signed inReview your recent sign-ins with location and device in Microsoft 365 or your Microsoft account, and what to… ▸How to remove a device from your Microsoft account or Microsoft 365 accountRemove a device from your personal Microsoft account or work account, sign out of Office on an old device,… ▸Have I Been Pwned: check whether your email is in a data breachCheck on Have I Been Pwned whether your email address or password is in a data breach, and what to do if it… ▸App passwords in Microsoft 365: create, delete and replace themWhen do app passwords still work in Microsoft 365? Create or delete one, what the end of SMTP AUTH basic…