Microsoft introduced a new security feature called Enhanced Phishing protection
Microsoft is testing a new feature in Windows 11 Enhanced Phishing Protection that protects users from copying and pasting their Windows password into websites and documents. When Microsoft first introduced the new Windows Enhanced Phishing protection, it only alerted users when they manually typed their Windows password into a document or web login page.With the release of Windows 11 22H2, Microsoft introduced a new security feature called Enhanced Phishing protection, designed to protect your Windows and Active Directory domain credentials from being obtained by threat actors.
Window 11 to have enhanced phishing protection feature
With Windows Hello for Business (WHFB), Windows provides organizations with a strong, phish-resistant credential, helping customers move to a passwordless future. Enterprise customers can now set the EnablePasswordlessExperience policy that promotes a user experience on AAD joined machines for core authentication scenarios without requiring a password. This new experience hides passwords from certain Windows authentication scenarios and leverages passwordless recovery mechanisms, such as WHFB PIN reset, if necessary.
With the release of Windows 11 Insider Dev build 23506, Microsoft has enhanced the phishing protection feature by now detecting the copy and paste of a user’s Windows password.
“We are trying out a change starting with this build where users who have enabled warning options for Windows Security under App & browser control > Reputation-based protection > Phishing protection will see a UI warning on unsafe password copy and paste, just as they currently see when they type in their password,” reads the Dev build release notes.
“Beginning in 2024, new Windows 11 devices will be shipped with the new Outlook for Windows as the default mailbox application free for all to use. The Mail and Calendar applications will continue to be available via download in the Microsoft Store through the end of 2024,” Microsoft said in a blogpost.
