circle

Blog Detail

Basic authentication

Basic authentication disabled by Outlook

Microsoft will disable basic authentication (username + password) on September 16, 2024, as part of its ‘Secure Future Initiative’. This change aims to enhance the cybersecurity of personal email accounts by moving away from outdated and vulnerable security measures.

The tech giant also announced the end of support for the ‘Mail’ and ‘Calendar’ applications in Windows. Additionally, it will deactivate Outlook Light and remove the ability to access Gmail accounts through Outlook.com. These steps are being taken to streamline and strengthen the security protocols across all Microsoft platforms.

 

Transition to Modern Authentication

Starting September 16, 2024, basic authentication will no longer be available for all personal Outlook accounts, including those on Outlook.com, Hotmail.com, and Live.com. This type of authentication is considered insecure because it transmits user credentials without any encryption. Such a lack of security allows network monitoring tools to easily intercept these credentials, potentially exposing them to unauthorized access. Furthermore, the use of basic authentication increases the risk of credential theft, which can lead to a higher likelihood of cyberattacks on user accounts.

“Basic authentication made it easy for criminals to capture credentials,” Microsoft explains. “As cyber threats have grown more sophisticated and frequent, we are moving to modern authentication methods to better protect personal accounts.”

Modern authentication will utilize tokens, providing a more secure way to verify user identities. This method is backed by multifactor authentication (MFA), adding an additional layer of security. However, users relying on older applications that only support basic authentication will be affected by this change. To maintain access to their accounts, they will need to upgrade to newer versions of Outlook or switch to other supported email clients that offer modern authentication features.

 

End of Support for Legacy Applications

Microsoft will also phase out the Mail and Calendar applications in Windows. Users are encouraged to migrate to the new Outlook for Windows, which offers enhanced security features, by December 31, 2024. Outlook Light, a simpler version of the Outlook Web App, will also be disabled on August 19, 2024, due to its outdated security standards and limited functionality. These changes are part of Microsoft’s broader strategy to retire legacy software that no longer meets the current security requirements.

 

Changes in Access to Gmail Accounts

Starting June 30, 2024, Outlook.com will cease to support direct access to Gmail accounts. However, this capability will still be available in the standalone versions of Outlook for Windows and Mac, ensuring that users can continue to manage multiple email accounts from one interface. In addition, as part of ongoing updates, features such as ‘Play my emails’ and ‘Voice Search’ in Outlook mobile will be removed by the end of this month due to the deactivation of Cortana. These adjustments are aimed at enhancing user experience and ensuring compliance with the latest security protocols.