I am reposting this article as I spent too much time yesterday, whilst on leave, convincing a business owner that they needed to implement Microsoft 365 multi-factor authentication for everyone.
Passwords are not enough.
Original Post
Eventually yes:
Something better than a password – Passwordless Authentication – CyberAwake