Microsoft debuts Temporary Access Pass to help sign up for services without using passwords, says ~200M users have enabled passwordless login for its services
Context & Ripple Effects
This announcement sits early in a four-year arc: Microsoft first shipped passwordless logins through its Authenticator app for Azure AD-connected apps back in 2018, and by late 2021 it went further, letting users remove passwords from their accounts entirely in favor of Authenticator, Windows Hello, security keys, or verification codes.
What makes the March 2021 data point matter is scale plus the missing piece it names. The ~200M users who had enabled passwordless login proved demand existed, but those users still needed a password to enroll new services in the first place — and Temporary Access Pass is Microsoft's tool for closing that bootstrap gap, the same gap that had to close before the company could later make new accounts passwordless by default.
First-order effects
- Admins enrolling new users can issue a temporary credential instead of a starting password, so accounts begin life tied to Authenticator or Windows Hello rather than being provisioned with a secret that has to be rotated away later.
- The ~200M figure converts passwordless from a niche Azure AD feature into a measurable baseline Microsoft can point to when extending it from enterprise apps to all consumer services.
Second-order effects
- With enrollment no longer requiring a password, Microsoft could take the next step months later and allow users to delete passwords from their accounts altogether, leaning fully on Authenticator, Windows Hello, security keys, and codes.
- Once password removal became viable for existing accounts, the remaining friction shifted to new-account creation — precisely where passkey support rolled out across Windows, Android, and iOS in 2024 before the default flipped in 2025.
Third-order effects
- The pattern's endpoint is already visible in the coverage: Microsoft making new accounts passwordless by default, which repositions passwords from the default credential to a legacy option most users never set up.
- If bootstrap credentials like Temporary Access Pass become standard practice, the identity question shifts from 'how do we store passwords safely' to 'how do we issue and recover passwordless credentials' — a structural change in how account security is designed.
The trend: Authentication is graduating from optional passwordless alternatives to passwordless-by-default, with temporary bootstrap passes handling the enrollment step that kept passwords necessary.