Now to December 2026: SMTP AUTH Basic Authentication behavior remains unchanged.
These updates are intended to give customers with tenants in our service (all cloud environments) more time to plan, validate, and deploy modern authentication alternatives, while maintaining a clear path toward stronger default security.
The most surprising:
End of December 2026: SMTP AUTH Basic Authentication will be disabled by default for existing tenants. Administrators will still be able to enable it if needed.
On Reddit:
They've pushed this date out like 6 times.