Microsoft banning weak Hotmail passwords
Hotmail changes mean you won't be able to express your love of cats in passwords anymore.
Microsoft has sought to make brute force attacks on email accounts a thing of the past by banning weak passwords.
The Redmond giant said it wants to stop users placing themselves at risk by using passwords like "password," "123456," "ilovecats" or "gogiants."
"This new feature will be rolling out soon, and will prevent you from choosing a very common password when you sign up for an account or when you change your password," said Dick Craddock, group programme manager at Hotmail, in a blog post.
"If you're already using a common password, you may, at some point in the future, be asked to change it to a stronger password."
Microsoft has also created a new feature which allows Hotmail users to report hacked accounts.
"It's easy: when you get that spam message supposedly from your friend, you just click My friend's been hacked!' on the Mark as' menu," Craddock said.
"You can also report an account as compromised when you mark a message as junk or otherwise move a message to the Junk folder."
Sign up today and you will receive a free copy of our Future Focus 2026 report - the leading resource for IT decision-maker insight on priorities and investment areas in AI, security and more.
A good week?
The Hotmail announcements round off a positive week for Microsoft in terms of security.
The company saw its Internet Explorer 9 rated as the best browser for blocking socially engineered malware.
In NSS Labs tests, IE9 managed to block 92 per cent of that particular type of threat, compared to 90 per cent for IE8. Safari, Chrome 10 and Firefox 4 all got just 13 per cent.
Tom Brewster is currently an associate editor at Forbes and an award-winning journalist who covers cyber security, surveillance, and privacy. Starting his career at ITPro as a staff writer and working up to a senior staff writer role, Tom has been covering the tech industry for more than ten years and is considered one of the leading journalists in his specialism.
He is a proud alum of the University of Sheffield where he secured an undergraduate degree in English Literature before undertaking a certification from General Assembly in web development.
-
Kaseya cuts the ribbon on new MSP Success program in partner growth driveNews The initiative combines digital marketing, peer collaboration, and community engagement tools to help partners tackle customer acquisition challenges
-
OpenAI plots ChatGPT ‘superapp’ overhaul ahead of public listingNews The company looks set to spruce up ChatGPT with a particular focus on agents to drive subscriptions
-
Dashlane lifts the lid on attack that saw hackers download encrypted user vaultsNews The company said it has now informed all affected customers, and taken action to shut down the operation
-
The NCSC says it’s time to switch to passkeysNews UK security organization calls for companies to step up and offer more secure ways to login
-
AI agents are creating new identity security risks: 1Password wants to solve thatNews The Unified Access system from 1Password will help enterprises manage AI agent access across different devices and users
-
Using AI to generate passwords is a terrible idea, experts warnNews Researchers have warned the use of AI-generated passwords puts users and businesses at risk
-
Researchers called on LastPass, Dashlane, and Bitwarden to up defenses after severe flaws put 60 million users at risk – here’s how each company respondedNews Analysts at ETH Zurich called for cryptographic standard improvements after a host of password managers were found lacking
-
Thousands of exposed civil servant passwords are up for grabs onlineNews While the password security failures are concerning, they pale in comparison to other nations
-
Gen Z has a cyber hygiene problemNews A new survey shows Gen Z is far less concerned about cybersecurity than older generations
-
Passwords are a problem: why device-bound passkeys can be the future of secure authenticationIndustry insights AI-driven cyberthreats demand a passwordless future…
