SetupAI
繁
SourceStalecollected in 18m

Microsoft Retires Picture Passwords for New Users

Read original on cnBeta (Full RSS)
#authentication#endpoint-security#windows-11#identity-management

A quiet Windows authentication change could affect secure access to AI development machines.

30-Second TL;DR

What Changed

Picture Password is no longer available for newly created users.

Why It Matters

The change may improve the default security posture for developer and enterprise machines by reducing reliance on a legacy sign-in method. Teams managing Windows-based AI development environments should verify authentication policies and onboarding procedures for new accounts.

What To Do Next

Audit your Windows onboarding scripts and device policies to ensure new developer accounts are configured for Windows Hello instead of Picture Password.

Who should care:Enterprise & Security Teams

Key Points

  • •Picture Password is no longer available for newly created users.
  • •Windows Hello is becoming the preferred authentication path.
  • •The change affects both Windows 10 and Windows 11.
  • •The adjustment is included in cumulative update KB5101650.

Deep Insight

AI-generated analysis for this event — not the original article.

Enhanced Key Takeaways

  • •Picture Password was originally introduced in Windows 8 as a touch-friendly authentication method designed for tablets and hybrid devices.
  • •The deprecation is part of Microsoft's broader 'Security by Default' initiative, which aims to phase out legacy authentication methods that are susceptible to shoulder-surfing and brute-force attacks.
  • •Existing users who already have Picture Password configured are currently grandfathered in, though Microsoft strongly encourages migration to Windows Hello or FIDO2-compliant security keys.
  • •The removal of this feature aligns with Microsoft's push to standardize authentication across the Windows ecosystem using the Windows Hello platform, which supports biometric and PIN-based security.
  • •Telemetry data cited by Microsoft indicates that Picture Password usage has declined significantly over the last decade, making it a low-priority feature for maintenance in modern Windows builds.

Technical Deep Dive

  • Picture Password relied on a gesture-based authentication mechanism where users performed a sequence of taps, circles, or lines on a chosen image.
  • The system stored the gesture data as a hash, which was then compared against the input during the login process.
  • Windows Hello utilizes the Windows Biometric Framework (WBF) and Trusted Platform Module (TPM) 2.0 to store and verify cryptographic keys, offering a significantly higher security posture than the gesture-based approach.
  • The KB5101650 update modifies the Credential Provider framework to exclude the Picture Password provider from the UI for new user profiles.

Future ImplicationsAI analysis grounded in cited sources

Microsoft will completely remove Picture Password support for all users by 2027.
The current move to block new users is a standard precursor to full feature deprecation in Windows lifecycle management.
Windows Hello will become the mandatory authentication method for all new Windows installations.
Microsoft is systematically removing legacy password and gesture-based options to enforce modern, hardware-backed security standards.

Timeline

2012-10
Picture Password is introduced as a flagship feature in Windows 8.
2015-07
Windows Hello launches with Windows 10, beginning the transition away from legacy authentication.
2023-10
Microsoft announces the 'Security by Default' initiative to harden Windows authentication.
2026-07
Cumulative update KB5101650 disables Picture Password for new users.
Read original article on cnBeta (Full RSS)

Weekly AI Recap

Read this week's curated digest of top AI events →

PostLinkedIn

AI-curated news aggregator. All content rights belong to original publishers.
Original source: cnBeta (Full RSS) ↗

This is a summary, not the original. Read the source, or get the weekly briefing.

The weekly digest

One email a week. Unsubscribe anytime.