Microsoft banning weak Hotmail passwords
Hotmail changes mean you won't be able to express your love of cats in passwords anymore.
Microsoft has sought to make brute force attacks on email accounts a thing of the past by banning weak passwords.
The Redmond giant said it wants to stop users placing themselves at risk by using passwords like "password," "123456," "ilovecats" or "gogiants."
"This new feature will be rolling out soon, and will prevent you from choosing a very common password when you sign up for an account or when you change your password," said Dick Craddock, group programme manager at Hotmail, in a blog post.
"If you're already using a common password, you may, at some point in the future, be asked to change it to a stronger password."
Microsoft has also created a new feature which allows Hotmail users to report hacked accounts.
"It's easy: when you get that spam message supposedly from your friend, you just click My friend's been hacked!' on the Mark as' menu," Craddock said.
"You can also report an account as compromised when you mark a message as junk or otherwise move a message to the Junk folder."
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
A good week?
The Hotmail announcements round off a positive week for Microsoft in terms of security.
The company saw its Internet Explorer 9 rated as the best browser for blocking socially engineered malware.
In NSS Labs tests, IE9 managed to block 92 per cent of that particular type of threat, compared to 90 per cent for IE8. Safari, Chrome 10 and Firefox 4 all got just 13 per cent.
Tom Brewster is currently an associate editor at Forbes and an award-winning journalist who covers cyber security, surveillance, and privacy. Starting his career at ITPro as a staff writer and working up to a senior staff writer role, Tom has been covering the tech industry for more than ten years and is considered one of the leading journalists in his specialism.
He is a proud alum of the University of Sheffield where he secured an undergraduate degree in English Literature before undertaking a certification from General Assembly in web development.
-
Google Cloud is more confident than ever in its AI strength, from hardware to softwareOpinion With a commitment to interoperability and open data connections, Google Cloud is daring its customers to find a more comprehensive AI suite on the market
-
Node4 names new CEO and chair in double leadership swoopNews Neil Muller joins the business as chief executive officer, while Patrick De Smedt has been named non-executive chair.
-
The NCSC says it’s time to switch to passkeysNews UK security organization calls for companies to step up and offer more secure ways to login
-
AI agents are creating new identity security risks: 1Password wants to solve thatNews The Unified Access system from 1Password will help enterprises manage AI agent access across different devices and users
-
Using AI to generate passwords is a terrible idea, experts warnNews Researchers have warned the use of AI-generated passwords puts users and businesses at risk
-
Researchers called on LastPass, Dashlane, and Bitwarden to up defenses after severe flaws put 60 million users at risk – here’s how each company respondedNews Analysts at ETH Zurich called for cryptographic standard improvements after a host of password managers were found lacking
-
Thousands of exposed civil servant passwords are up for grabs onlineNews While the password security failures are concerning, they pale in comparison to other nations
-
Gen Z has a cyber hygiene problemNews A new survey shows Gen Z is far less concerned about cybersecurity than older generations
-
Passwords are a problem: why device-bound passkeys can be the future of secure authenticationIndustry insights AI-driven cyberthreats demand a passwordless future…
-
LastPass just launched a tool to help security teams keep tabs on shadow IT risksNews Companies need to know what apps their employees are using, so LastPass made a browser extension to help
