Microsoft announced that it will disable the 30-year-old NTLM authentication protocol by default in upcoming Windows releases due to security vulnerabilities that expose organizations to cyberattacks.

February 2026 Patch Tuesday restricts Windows credential autofill to fix a Windows Hello input injection flaw (CVE-2026-20804 ...

Microsoft confirms a 3-phase strategy to deprecate NTLM, improve auditing, prioritize Kerberos, and disable NTLM by default ...

Future Windows updates will disable NTLM authentication, bolstering security and protecting users against legacy protocol ...

Microsoft is preparing one of the most consequential security shifts in Windows in decades, turning off NTLM authentication ...

Microsoft continually makes enhancements to Windows and while general users judge these efforts based on what they can actually see and use, the company makes a lot of changes on the backend that ...