https://ia.acs.org.au/article/2024/email-security-change-about-to-cause-chaos-in-your-office.html

A major change in email security is set to cause disruption for many businesses and individuals. Microsoft and Google are disabling Basic Authentication (SMTP AUTH), an outdated method used by millions of devices to send emails directly. This will affect everything from security cameras and printers to scanners and network firewalls.

Why the Change?

Basic Authentication transmits usernames and passwords in plain text, making them vulnerable to theft. Disabling it will improve email security by forcing users to switch to OAuth 2.0, a more secure method that generates unique tokens for each device.

What Devices are Affected?

Many older devices, especially those not regularly updated, may only support Basic Authentication. This includes printers, scanners, security cameras, and network equipment.

Potential Impact:

  • Disruptions to email alerts and notifications from security cameras and firewalls.
  • Inability to scan documents and send them directly to email using printers and scanners.
  • Unexpected issues for businesses that rely on these functionalities.

What to Do?

  • Check with your IT department to ensure all devices are compatible with OAuth 2.0.
  • Update device firmware if possible.
  • Consider alternative solutions for email alerts and notifications.

Businesses should proactively review their IT infrastructure to identify devices still using Basic Authentication. And individuals should be aware of potential disruptions and contact IT support if they experience issues.

By transitioning to a more secure authentication method, email providers aim to protect users from credential stuffing attacks and improve overall email security. However, the change may require some adjustments and updates for those still relying on Basic Authentication.