Microsoft deprecates picture passwords in Windows 11

Microsoft is phasing out the picture password authentication feature in Windows 11. As part of recent updates, the company has disabled the ability for users to enroll in new picture passwords, though those who have already configured them can continue to use them for the time being.

This shift is part of a broader effort to move users toward more secure, enterprise-grade authentication methods. Microsoft recommends transitioning to Windows Hello biometrics, such as facial recognition or fingerprint scanning, as well as PINs and FIDO2 keys.

Security concerns regarding picture passwords include their vulnerability to being guessed via screen smudges or predictable gesture patterns. By deprecating this legacy method, Microsoft aims to reduce the attack surface of the Local Security Authority Subsystem Service (LSASS) and encourage the adoption of hardware-backed security protocols.