Share this article
Latest news
With KB5043178 to Release Preview Channel, Microsoft advises Windows 11 users to plug in when the battery is low
Copilot in Outlook will generate personalized themes for you to customize the app
Microsoft will raise the price of its 365 Suite to include AI capabilities
Death Stranding Director’s Cut is now Xbox X|S at a huge discount
Outlook will let users create custom account icons so they can tell their accounts apart easier
Microsoft deprecates password payload in MPR notifications to enhance security
The feature will be disabled by default in Windows 11, version 24H2
2 min. read
Updated onMarch 25, 2024
updated onMarch 25, 2024
Share this article
Read our disclosure page to find out how can you help Windows Report sustain the editorial teamRead more
On Friday, Microsoft added password payloads in MPR notifications to itslist of deprecated features. It comes after the tech giant’s recent decision to bid farewell tocertificates using RSA keys shorter than 2048 bits.
Password payload in MPR notifications to deprecate starting in Windows 11 24H2
Microsoft has yet to mention the exact deprecation date, but we assume it will be later this year. Although the news of a deprecated feature may sound bad, this decision is good, as far as users are concerned.
Deprecating NPLogonNotify and NPPasswordChangeNotify APIs will enhance the security further. Talking of the same, the company says those APIs allow the caller to extract users’ passwords which poses a big threat of exposing passwords to malicious users.
In addition, Microsoft will still allow including password payload by setting the EnableMPRNotification policy toenabled.
Adding the feature to the deprecated list, Microsoft says:
Starting in Windows 11, version 24H2, the inclusion of password payload in MPR notifications is set to disabled by default through group policy inNPLogonNotifyandNPPasswordChangeNotifyAPIs. The APIs may be removed in a future release. The primary reason for disabling this feature is to enhance security. When enabled, these APIs allow the caller to retrieve a user’s password, presenting potential risks for password exposure and harvesting by malicious users. To include password payload in MPR notifications, set the EnableMPRNotifications policy to enabled.
Summing up, it is worth noting that Microsoft has announced the deprecation of three features this month only.
More about the topics:microsoft,security
Vlad Turiceanu
Windows Editor
Passionate about technology,Windows, and everything that has a power button, he spent most of his time developing new skills and learning more about the tech world.
Coming from a solid background in PC building and software development, with a complete expertise in touch-based devices, he is constantly keeping an eye out for the latest and greatest!
User forum
0 messages
Sort by:LatestOldestMost Votes
Comment*
Name*
Email*
Commenting as.Not you?
Save information for future comments
Comment
Δ
Vlad Turiceanu
Windows Editor
Coming from a solid background in PC building and software development, he’s a Windows 11 Privacy & Security expert.
