To date, Microsoft has always admitted the use ofbasic authentication to access your Outlook accounts. That is, users could carry out the login are Outlook using only your username and password. From September 16, 2024Outlook will require everyone with a Microsoft email account to use a mail or calendar app capable of supporting the so-called modern authentication. The news will also be extended to the site Outlook.com.
The intent of the Redmond company is to make access to data more secure account Outlook. By requiring the use of modern authentication, any attackers will no longer be able to access the contents of Outlook once they have access to someone else’s access credentials.
What is Modern Authentication for Microsoft
With the term Modern Authentication, Microsoft refers to a set of more secure and advanced authentication and authorization methods that replace older, less secure authentication mechanisms (such as username and password login). The technology, an integral part of Microsoft 365, is also extended to personal accounts and its use will become mandatory from September 16th.
Modern authentication “in Microsoft style” involves the use of authentication methods such as multi-factor authentication (MFA), smart card authentication, client certificate-based authentication, and third-party SAML authentication. As an authorization method, however, Microsoft relies on the well-known OAuth protocol (Open Authorization).
Finally, the Modern Authentication also provides conditional access policies based on mobile application management (MAM) and the use of Microsoft Entra, a solution for identity and access protection.
What changes in practice for Outlook users with a personal account
From now until next September 16th, those who use a personal Outlook account (including live.com, hotmail.com and the like) must verify that they have an application capable of supporting modern authentication. The latest versions of Outlook, Thunderbird and Apple Mail meet the new requirements imposed by Microsoft.
Likewise, to access Outlook.com it will be essential to add a second factor. In this way, those who have the correct user credentials will not be able to log in unless authorized, for example, via their smartphone.
Microsoft says goodbye to the “light” version of Outlook and the historic Mail and Calendar apps of Windows
For the benefit of users who use devices with a mediocre hardware configuration and a narrow-band Internet connection, Microsoft has so far made available a lightweight version of Outlook, accessible via the Web. Outlook Web Apphowever, will be retired starting August 19, 2024 and can therefore no longer be used on any device.
The company led by Satya Nadella has not clarified in detail the reasons for its decision but has nevertheless hinted that the Outlook Web App does not allow it to comply with the requirements of modern authentication.
Despite the criticism received by the new Outlook for Windows, the Redmond company is now determined to present it as the solution in which Microsoft intends to invest.
Thus, the historic Windows Mail and Calendar applications, the company still reveals, will not be updated or supported by the end of 2024.