Microsoft has begun phasing out password saving in Authenticator. As of June 1, 2025, the app no longer allows users to save any new passwords.
By August, saved passwords will no longer be accessible in the app at all. Microsoft is pushing users to instead rely on the password management functionality built into the Edge browser. While the Authenticator app will continue to support more secure passkeys, this change highlights the challenges and security risks of relying on consumer-grade password management solutions in the enterprise.
Browser-based password managers lack enterprise-grade security and control
Browser-based password vaults, while convenient, simply do not provide the level of security, visibility and control that IT and security leaders require to safeguard their organizations. Key issues include:
- Lack of centralized visibility and management across the organization
- Inability to enforce security policies and access controls
- No auditing or reporting to meet compliance requirements
- Passwords stored locally on devices with inconsistent encryption
The Edge password manager is unlikely to offer substantially better security than other browser-based options. Switching from the Authenticator app to in-browser password storage in Edge may actually increase password vulnerability for some organizations.
For IT leaders serious about maturing their organization's identity security posture, now is the time to implement a true enterprise-grade password management solution that can serve as a foundation for organizations to build upon as they progress in their identity security journey.
While passkeys and passwordless authentication are absolutely the direction the industry is headed, we can't ignore today's reality. The vast majority of applications and services still rely on passwords. Completely eliminating them will be a long, gradual process that requires major shifts in user behavior.
Most organizations have hundreds of thousands of passwords across their environment that need to be secured. Even those aggressively adopting passkeys will need to safely vault existing passwords as they transition.
Delinea Credential Manager delivers modern password security for the enterprise
Delinea Credential Manager (DCM) provides a comprehensive enterprise password management solution. DCM offers the same streamlined end-user experience as consumer password managers, with the powerful security, control, and analytics capabilities that IT leaders demand. With DCM, you can:
- Centrally secure and manage all workforce passwords in an encrypted vault
- Enforce least privilege access and granular security controls
- Maintain a complete audit trail of all credential access and usage
- Deliver a consumer-like password management experience to improve adoption
- Record sessions for sensitive workforce accounts
DCM also offers a mobile experience, making the transition from Microsoft Authenticator or other password managers frictionless for end users. It will also support passkeys in the first half of 2026, enabling a smooth transition to passwordless authentication.
Take control of your organization's password security today
Don't let Microsoft's Authenticator changes derail your identity security progress. Now is the time for IT leaders to deploy an enterprise password management solution built for the needs of modern organizations. See for yourself how DCM can secure your workforce passwords while delivering a premium user experience.